Ultimate Member Ultimate Member
8 CVEs affecting Ultimate Member Ultimate Member. Latest disclosed: 2025-05-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0588 | High | 7.5 | 2018-05-14 | Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to read arbitrary… |
CVE-2025-47691 | Medium | 5.5 | 2025-05-07 | Improper Control of Generation of Code ('Code Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Code Injection.This issue aff… |
CVE-2018-0585 | Medium | 5.4 | 2018-05-14 | Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTM… |
CVE-2023-31216 | Medium | 4.3 | 2023-07-17 | Cross-Site Request Forgery (CSRF) vulnerability in Ultimate Member plugin <= 2.6.0 versions. |
CVE-2018-0590 | Medium | 4.3 | 2018-05-14 | Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the other users profil… |
CVE-2018-0589 | Medium | 4.3 | 2018-05-14 | Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to add a new form in the 'Forms'… |
CVE-2018-0587 | Medium | 4.3 | 2018-05-14 | Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to upload arbitrary ima… |
CVE-2018-0586 | Medium | 4.3 | 2018-05-14 | Directory traversal vulnerability in the shortcodes function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attacke… |