Ultimate Member Security Vulnerabilities and Issues — Ultimate Member CVE List

Lucene search

UltimatememberUltimate Member

4 matches found

CVE•added 2018/05/14 1:29 p.m.•44 views

CVE-2018-0585

Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

5.4CVSS5.8AI score0.00417EPSS

CVE•added 2018/10/09 10:29 p.m.•38 views

CVE-2018-17866

Multiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membership" plugin before 2.0.28 for WordPress allow remote attackers to inject arbitrary web script or HTML via the "Primary button Text" or "Second button text" field...

6.1CVSS6.1AI score0.00359EPSS

CVE•added 2018/02/16 2:29 p.m.•36 views

CVE-2018-6944

core/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitize user input passed to the $temp variable.

6.1CVSS6AI score0.00285EPSS

CVE•added 2018/07/04 8:29 a.m.•35 views

CVE-2018-13136

The Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen.

6.1CVSS6AI score0.00347EPSS