CVE-2026-12251: fallo de gravedad alta en Ultimate Member
Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
41Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 8.1epss 0.4%
The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable on its registration forms, and its post-registration safeguard against elevated accounts is disabled by default, allowing unauthenticated users to register with a site-defined role that carries administrator capabilities and gain administrative access, when such a role exists and a role-selection field is present on a published registration form.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Unknown · Ultimate MemberPoCs públicas encontradas — 1
cve_referencewpscan.com/vulnerability/dd394110-cf3c-4158-8b50-7abb8a23a2be/no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Ultimate Member
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-3460—Ultimate Member < 2.6.7 - Unauthenticated Privilege EscalationEPSS 72.3%CVE-2026-85680HIGHUltimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page TitleEPSS 0.5%CVE-2026-11766HIGHUltimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile FieldsEPSS 0.4%CVE-2026-19423HIGHUltimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile FormsEPSS 0.4%CVE-2026-19251MEDIUMUltimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile ActivityEPSS 0.3%