6 matches found
CVE-2015-9304
The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input.
CVE-2019-14945
The ultimate-member plugin before 2.0.54 for WordPress has XSS.
CVE-2019-14946
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations.
CVE-2019-14947
The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade.
CVE-2018-20965
The ultimate-member plugin before 2.0.4 for WordPress has XSS.
CVE-2016-10872
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.