ultimatemember Vulnerability Advisory Catalog

Total 53 security vulnerabilities recorded for ultimatemember software and firmware.

← Back to All Vendors
Component: ultimate_member

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable ...

📅 2025-02-21
CVSS 5.3 Dossier →
CVE-2025-0318 MEDIUM
Component: ultimate_member

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable ...

📅 2025-01-18
CVSS 5.3 Dossier →
Component: ultimate_member

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable ...

📅 2025-01-18
CVSS 7.5 Dossier →
CVE-2024-54367 CRITICAL
Component: forumwp

Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a throug...

📅 2024-12-16
CVSS 9.8 Dossier →
Component: jobboardwp

Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Incorrectly Configured Access Cont...

📅 2024-12-09
CVSS 5.2 Dossier →
Component: forumwp

The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘url’ parameter in all versions up...

📅 2024-12-06
CVSS 6.1 Dossier →
Component: forumwp

The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_q...

📅 2024-12-06
CVSS 6.1 Dossier →
Component: jobboardwp

The JobBoardWP – Job Board Listings and Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_a...

📅 2024-11-23
CVSS 6.1 Dossier →
Component: ultimate_member

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable ...

📅 2024-11-21
CVSS 4.3 Dossier →
CVE-2024-8520 MEDIUM
Component: ultimate_member

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable ...

📅 2024-10-04
CVSS 5.3 Dossier →
CVE-2024-8519 MEDIUM
Component: ultimate_member

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable ...

📅 2024-10-04
CVSS 6.4 Dossier →
Component: forumwp

The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via Insecure Direct Object Reference in all v...

📅 2024-09-06
CVSS 8.8 Dossier →
CVE-2024-2765 MEDIUM
Component: ultimate_member

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable ...

📅 2024-05-02
CVSS 5.4 Dossier →
CVE-2024-1071 CRITICAL
Component: ultimate_member

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable ...

📅 2024-03-13
CVSS 9.8 Dossier →
Component: ultimate_member

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable ...

📅 2024-03-13
CVSS 7.2 Dossier →
Component: ultimate_member

Cross-Site Request Forgery (CSRF) vulnerability in Ultimate Member plugin <= 2.6.0 versions....

📅 2023-07-17
CVSS 4.3 Dossier →
CVE-2023-3460 CRITICAL
Component: ultimate_member

The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allow...

📅 2023-07-04
CVSS 9.8 Dossier →
Component: jobboardwp

The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthentica...

📅 2022-12-19
CVSS 7.5 Dossier →
Component: ultimate_member

The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the populate_dropdown_opti...

📅 2022-11-29
CVSS 7.2 Dossier →
Component: ultimate_member

The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the get_option_value_from_...

📅 2022-11-29
CVSS 7.2 Dossier →
CVE-2022-3361 MEDIUM
Component: ultimate_member

The Ultimate Member plugin for WordPress is vulnerable to directory traversal in versions up to, and including 2.5.0 due to insufficient input validat...

📅 2022-11-29
CVSS 4.3 Dossier →
CVE-2022-3966 MEDIUM
Component: ultimate_member

A vulnerability, which was classified as critical, has been found in Ultimate Member Plugin up to 2.5.0. This issue affects the function load_template...

📅 2022-11-13
CVSS 4.3 Dossier →
CVE-2022-1208 MEDIUM
Component: ultimate_member

The Ultimate Member plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Biography field featured on individual user profile page...

📅 2022-06-13
CVSS 6.4 Dossier →
CVE-2022-1209 MEDIUM
Component: ultimate_member

The Ultimate Member plugin for WordPress is vulnerable to arbitrary redirects due to insufficient validation on supplied URLs in the social fields of ...

📅 2022-05-10
CVSS 4.3 Dossier →
Page 1 of 3 (53 Total Records)