CVE-2015-9306

The CVE-2015-9306 entry concerns the WordPress plugin wp-ultimate-csv-importer; versions prior to 3.8.1 are affected by a Cross-Site Scripting (XSS) vulnerability. The issue arises from inadequate validation of client-side data. Impact is XSS execution within the context of the user’s browser; ex...

PT-2019-13884

Name of the Vulnerable Software and Affected Versions Ultimate-member plugin versions prior to 2.0.52 Description The issue concerns a problem with the Ultimate-member plugin for WordPress, where there is XSS during an account upgrade. Recommendations For versions prior to 2.0.52, update to versi...

CVE-2019-14945: Improper Neutralization of Input During Web Page Generation

The ultimate-member plugin before 2.0.54 for WordPress has XSS...

CVE-2019-14946: Improper Neutralization of Input During Web Page Generation

The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations...

CVE-2015-9304: Improper Neutralization of Input During Web Page Generation

The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input...

CVE-2019-14947: Improper Neutralization of Input During Web Page Generation

The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade...

PT-2019-10401 · WordPress · Ultimate Member

Name of the Vulnerable Software and Affected Versions: Ultimate-member plugin versions prior to 2.0.4 Description: The issue is related to a Cross-Site Scripting XSS problem. Recommendations: For versions prior to 2.0.4, update to version 2.0.4 or later to resolve the issue...

CVE-2015-9306: Improper Neutralization of Input During Web Page Generation

The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS...

PT-2019-7265 · WordPress · Wp Ultimate Csv Importer

Name of the Vulnerable Software and Affected Versions: wp-ultimate-csv-importer plugin version prior to 3.8.1 for WordPress Description: The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a...

PT-2019-13883

Name of the Vulnerable Software and Affected Versions ultimate-member plugin versions prior to 2.0.52 Description The issue is related to cross-site scripting XSS and is associated with the create and edit operations of UM Roles. Recommendations For versions prior to 2.0.52, update to version...

PT-2019-7263 · WordPress · Ultimate Member

Name of the Vulnerable Software and Affected Versions: ultimate-member plugin versions prior to 1.3.18 Description: The issue is related to a Cross-Site Scripting XSS vulnerability, which occurs when an application includes user input in its output without proper validation or sanitization,...

CVE-2018-20965: Improper Neutralization of Input During Web Page Generation

The ultimate-member plugin before 2.0.4 for WordPress has XSS...

PT-2019-7668 · WordPress · Ultimate Member

Name of the Vulnerable Software and Affected Versions: Ultimate-member plugin versions prior to 1.3.40 Description: The issue concerns a Cross-Site Scripting XSS flaw located on the login form. Recommendations: For versions prior to 1.3.40, update to version 1.3.40 or later to resolve the issue...

CVE-2016-10872: Improper Neutralization of Input During Web Page Generation

The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...

PT-2019-13882

Name of the Vulnerable Software and Affected Versions Ultimate-member plugin versions prior to 2.0.54 Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For versions prior to 2.0.54, update to version 2.0.54 or later to resolve the issue...

Ultimate Loan Manager 2.0 - Cross-Site Scripting Vulnerability

Exploit for multiple platform in category web applications Exploit Title:Web Studio Ultimate Loan Manager V2.0 - Persistent Cross Site Scripting Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: http://www.webstudio.co.zw/ Software Link:...

Ultimate Loan Manager 2.0 Cross Site Scripting

Exploit Title:Web Studio Ultimate Loan Manager V2.0 - Persistent Cross Site Scripting Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: http://www.webstudio.co.zw/ Software Link: https://codecanyon.net/item/ultimate-loan-manager/19891884 Version: V2.0 Category: Webapps Software...

Ultimate Member <= 2.0.53 - Cross-Site Scripting (XSS)

The changelog states: "Added security fixes XSS"...

WordPress Ultimate Member Plugin < 2.0.40 CSRF Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

Unspecified Vulnerability in JetBrains IntelliJ IDEA Ultimate

JetBrains IntelliJ IDEA Ultimate is a Czech JetBrains integrated development environment for the Java language. A security vulnerability exists in JetBrains IntelliJ IDEA Ultimate that originates from the program logging server credentials in plaintext to the IDE configuration file. An attacker...