Vulnerabilidades en ultimatemember

35 resultados
CVE-2024-10879MEDIUMForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2025-0318MEDIUMUltimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.9.1 - Information ExposureEPSS 0.4%CVE-2026-18547MEDIUMUltimate Member <= 2.12.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Textarea Profile Field with HTML Support (DOM Gadget via id Attribute)EPSS 0.4%CVE-2024-11204MEDIUMForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2024-8520MEDIUMUltimate Member <= 2.8.6 - Cross-Site Request Forgery to Membership Status ChangeEPSS 0.3%CVE-2025-14081MEDIUMUltimate Member <= 2.11.0 - Authenticated (Subscriber+) Profile Privacy Setting BypassEPSS 0.3%CVE-2025-13217MEDIUMUltimate Member <= 2.11.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'value'EPSS 0.3%CVE-2025-15064MEDIUMUltimate Member <= 2.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via DOM GadgetsEPSS 0.3%CVE-2026-1404MEDIUMUltimate Member <= 2.11.1 - Reflected Cross-Site Scripting via Filter ParametersEPSS 0.3%CVE-2026-96270HIGHUltimate Member <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'form_id' ParameterEPSS 0.2%CVE-2025-13220MEDIUMUltimate Member <= 2.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.2%CVE-2026-4248HIGHUltimate Member <= 2.11.2 - Authenticated (Contributor+) Sensitive Information Exposure to Account Takeover via Shortcode Template TagEPSS 0.2%CVE-2025-13746MEDIUMForumWP – Forum & Discussion Board <= 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display NameEPSS 0.2%CVE-2026-116621MEDIUMUltimate Member <= 2.14.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Custom Textarea Profile FieldEPSS 0.2%CVE-2026-107625MEDIUMUltimate Member <= 2.14.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user_url' Profile FieldEPSS 0.2%