Ultimate Membership Pro@* Security Vulnerabilities and Issues — Ultimate Membership Pro@* CVE List

Lucene search

WpindeedUltimate Membership Pro*

3 matches found

CVE•added 2024/08/19 5:15 p.m.•54 views

CVE-2024-43240

Improper Privilege Management vulnerability in azzaroco Ultimate Membership Pro allows Privilege Escalation.This issue affects Ultimate Membership Pro: from n/a through 12.6.

9.8CVSS9.4AI score0.00162EPSS

CVE•added 2024/08/19 6:15 p.m.•47 views

CVE-2024-43242

Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro allows Object Injection.This issue affects Ultimate Membership Pro: from n/a through 12.6.

10CVSS9.2AI score0.00289EPSS

CVE•added 2024/10/16 7:15 a.m.•34 views

CVE-2020-36832

The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login as any user, including the site administrator with a default user ID of 1, via the username or user I...

9.8CVSS9.5AI score0.00682EPSS