Ultimatemember vulnerabilities
35 CVEs and advisories name Ultimatemember as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-3383Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Remote Code Execution via Multi-Select
- CVE-2022-3384Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um_populate_dropdown_options
- CVE-2022-3361Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodes
- CVE-2022-1208Ultimate Member <= 2.3.2 - Stored Cross-Site Scripting
- CVE-2022-1209Ultimate Member <= 2.3.1 - Arbitrary Redirect