UP
Product
User Profile & Membership
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch
Add User Profile & Membership to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10233 | 8.8 | Apr 23 | The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks Affected: before 2.0.7 |
| CVE-2018-0588 | 7.5 | May 14 | Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to read arbitrary files via… Affected: before 2.0.4 |
| CVE-2018-10234 | 4.8 | Apr 23 | Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input field on the… Affected: before 2.0.11 |
| CVE-2018-0590 | 4.3 | May 14 | Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the other users profiles via unspecified… Affected: before 2.0.4 |
| CVE-2018-0589 | 4.3 | May 14 | Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to add a new form in the 'Forms' page via… Affected: before 2.0.4 |
| CVE-2018-0587 | 4.3 | May 14 | Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to upload arbitrary image files via… Affected: before 2.0.4 |
| CVE-2018-0586 | 4.3 | May 14 | Directory traversal vulnerability in the shortcodes function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to read arbitrary… Affected: before 2.0.4 |
Showing 7