Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/03 3:16 a.m.•31 views

CVE-2026-96270

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...

7.2CVSS0.00247EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/10/03 2:25 a.m.•21 views

EUVD-2026-91876

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...

7.2CVSS6.1AI score0.00247EPSS
SaveExploits0References8
CVE
CVE
•added 2026/10/03 2:25 a.m.•43 views

CVE-2026-96270

The Ultimate Member plugin for WordPress (versions up to and including 2.13.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the 'form_id' parameter. The root cause is insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts...

7.2CVSS6.1AI score0.00247EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/10/03 2:25 a.m.•14 views

CVE-2026-96270 Ultimate Member <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'form_id' Parameter

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...

7.2CVSS6.1AI score0.00247EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/03 12:00 a.m.•15 views

CVE-2026-96270: Improper Neutralization of Input During Web Page Generation

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...

7.2CVSS6.1AI score0.00247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/03 12:00 a.m.•14 views

PT-2026-104487

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form id' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...

7.2CVSS6.1AI score0.00247EPSS
SaveExploits0References9
Rows per page
Query Builder