Login Request a demo
UM
Product
Ultimate Member
by Ultimatemember · last CVE Feb 21, 2025
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities37In the news0Timeline
Severity mix
Critical 4High 8Medium 25Low 0
Severity
All severities37Critical4High8Medium25Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ultimate Member to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-1071
9.8
89%
Mar 13
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the…
Affected: 2.1.3 before 2.8.3
CVE-2023-3460
9.8
72%
Jul 4
The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create…
Affected: before 2.6.7
CVE-2020-36157
9.8
3%
Jan 4
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles
Affected: before 2.1.12
CVE-2020-36155
9.8
10%
Jan 4
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta
Affected: before 2.1.12
Showing 4