Lucene search
WpvulndbWPVDB-ID:20FD0DA4-EE1A-4557-AEE5-77953879B93CHistoryOct 28, 2022 - 12:00 a.m.
Ultimate Member < 2.5.1 - Admin+ RCE
2022-10-2800:00:00
wpscan.com
5
ultimate member plugin
high privilege user
rce
multisite setup
0.005 Low
EPSS
Percentile
77.6%
The plugin does not validate user input passed to call_user_func() via the get_option_value_from_callback() function, which could allow high privilege users to perform RCE even when they are not allowed to (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| ultimate-member | lt | 2.5.1 |
Related
cve
cve
CVE-2022-3383
2022-11-29 21:15:10
patchstack
patchstack
cnvd
cnvd
WordPress Ultimate Member plugin remote code execution vulnerability
2022-11-30 00:00:00
cvelist
cvelist
CVE-2022-3383
2022-11-29 20:40:09
nvd
nvd
CVE-2022-3383
2022-11-29 21:15:10
prion
prion
Design/Logic Flaw
2022-11-29 21:15:00
osv
osv
CVE-2022-3384
2022-11-29 21:15:11
CVE-2022-3383
2022-11-29 21:15:10
openvas
openvas
WordPress Ultimate Member Plugin < 2.5.1 Multiple Vulnerabilities
2022-12-02 00:00:00