Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-07
Ultimate Member - Security Vulnerability (CVE-2026-116621)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pm_note (any custom Textarea metakey with html disabled)' parameter in all versions up to, and including, 2.14.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Successful exploitation requires a privileged victim to click the attacker-rendered…
PLUGIN
Ultimate Member
CVE-2026-116621
Risk Score
Threat Entry
Updated 2026-10-11
Ultimate Member - Security Vulnerability (CVE-2026-96539)
Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.
PLUGIN
Ultimate Member
CVE-2026-96539
Risk Score
Threat Entry
Updated 2026-10-06
Ultimate Member - Security Vulnerability (CVE-2026-96451)
Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.
PLUGIN
Ultimate Member
CVE-2026-96451
Risk Score
Threat Entry
Updated 2026-10-06
Ultimate Member - Security Vulnerability (CVE-2026-93428)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.1 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to view privacy-restricted member profile field values — including fields explicitly configured as owner-only, members-only, or role-restricted — by querying the publicly accessible wp_ajax_nopriv_um_get_members endpoint. The nonce required by the endpoint ('um-frontend-nonce') is emitted…
PLUGIN
Ultimate Member
CVE-2026-93428
Risk Score
Threat Entry
Updated 2026-10-06
Ultimate Member - Security Vulnerability (CVE-2026-96270)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_id' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is stored in the registering user's 'submitted' usermeta via update_user_meta() and is only triggered when an administrator opens the…
PLUGIN
Ultimate Member
CVE-2026-96270
Risk Score
Threat Entry
Updated 2026-10-01
Ultimate Member - Security Vulnerability (CVE-2026-62059)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1.
PLUGIN
Ultimate Member
CVE-2026-62059
Risk Score
Threat Entry
Updated 2026-09-21
Ultimate Member - Security Vulnerability (CVE-2026-85680)
The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names before outputting it in the page title, and decodes HTML entities in it after its own sanitisation has already run, allowing unauthenticated attackers who register an account to store JavaScript that will execute when any visitor, including an administrator, views their profile.
PLUGIN
Ultimate Member
CVE-2026-85680
Risk Score
Threat Entry
Updated 2026-09-03
Ultimate Member - Security Vulnerability (CVE-2026-19251)
The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the profile it belongs to is private, before returning profile activity to unauthenticated visitors, allowing them to read the content of comments still awaiting moderation.
PLUGIN
Ultimate Member
CVE-2026-19251
Risk Score
Threat Entry
Updated 2026-08-28
Ultimate Member - Improper Input Validation (CVE-2026-19423)
The Ultimate Member WordPress plugin before 2.13.0 does not validate a submitted role selection when it cannot resolve the set of roles a profile form permits, and screens the value against the site's registered role names rather than against the form's own allow-list, allowing unauthenticated users who register through the Ultimate Member WordPress plugin before 2.13.0's own form to grant themselves arbitrary capabilities and reach administrator-equivalent access.
PLUGIN
Ultimate Member
CVE-2026-19423
Risk Score
Threat Entry
Updated 2026-09-28
Ultimate Member - Cross-Site Scripting (XSS) (CVE-2026-18547)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Textarea Profile Field with HTML Support (DOM Gadget via id Attribute) in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is possible because the wp_kses 'templates' allowlist permits…
PLUGIN
Ultimate Member
CVE-2026-18547
Risk Score
Threat Entry
Updated 2026-08-26
Ultimate Member - Security Vulnerability (CVE-2026-12251)
The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable on its registration forms, and its post-registration safeguard against elevated accounts is disabled by default, allowing unauthenticated users to register with a site-defined role that carries administrator capabilities and gain administrative access, when such a role exists and a role-selection field is present on a published registration form.
PLUGIN
Ultimate Member
CVE-2026-12251
Risk Score
Threat Entry
Updated 2026-07-10
Ultimate Member - SQL Injection (CVE-2026-15290)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to blind SQL Injection via the search parameter in all versions up to, and including, 2.10.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This vulnerability was partially patched in version 2.9.2…
PLUGIN
Ultimate Member
CVE-2026-15290
Risk Score
Threat Entry
Updated 2026-07-06
Ultimate Member - Security Vulnerability (CVE-2026-11766)
The Ultimate Member WordPress plugin before 2.12.0 does not properly sanitise and escape the value of custom textarea profile fields before outputting it on user profiles, allowing authenticated users with Subscriber-level access and above to store JavaScript that executes when any user, including an administrator, views the affected profile.
PLUGIN
Ultimate Member
CVE-2026-11766
Risk Score
Threat Entry
Updated 2026-07-06
Ultimate Member - Cross-Site Scripting (XSS) (CVE-2026-8489)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'about_me' parameter in all versions up to, and including, 2.11.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Ultimate Member
CVE-2026-8489
Risk Score
Threat Entry
Updated 2026-06-25
Ultimate Member - Security Vulnerability (CVE-2026-7761)
The Ultimate Member plugin for WordPress is vulnerable to Account Takeover via Password Reset Link Disclosure in all versions up to and including 2.11.4. This is due to a chain of three logic bugs: (1) an MD5 hash fallback in get_directory_by_hash() that allows any post to be used as a member directory by computing SUBSTRING(MD5(post_id), 11, 5), (2) a strstr() parsing logic flaw in post_data() that allows bypassing WordPress's protected meta key restrictions by placing '_um_' anywhere in the meta key name rather than at the start, and (3) missing…
PLUGIN
Ultimate Member
CVE-2026-7761
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Path Traversal (CVE-2020-37169)
WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipulating the pack parameter in class-admin-upgrade.php. Attackers can send POST requests with malicious pack values to include unintended PHP files from the packages directory and execute arbitrary code.
PLUGIN
Ultimate Member
CVE-2020-37169
Risk Score
Threat Entry
Updated 2026-07-24
Ultimate Member - Cross-Site Scripting (XSS) (CVE-2025-15064)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user description field in all versions up to, and including, 2.11.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability is only exploitable when "HTML support for user description" is enabled in Ultimate…
PLUGIN
Ultimate Member
CVE-2025-15064
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Information Disclosure (CVE-2026-4248)
The Ultimate Member plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.2. This is due to the '{usermeta:password_reset_link}' template tag being processed within post content via the '[um_loggedin]' shortcode, which generates a valid password reset token for the currently logged-in user viewing the page. This makes it possible for authenticated attackers, with Contributor-level access and above, to craft a malicious pending post that, when previewed by an Administrator, generates a password reset token for the Administrator and exfiltrates it to an attacker-controlled…
PLUGIN
Ultimate Member
CVE-2026-4248
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Cross-Site Scripting (XSS) (CVE-2026-1404)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the filter parameters (e.g., 'filter_first_name') in all versions up to, and including, 2.11.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
PLUGIN
Ultimate Member
CVE-2026-1404
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Cross-Site Scripting (XSS) (CVE-2025-13220)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode attributes in all versions up to, and including, 2.11.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Ultimate Member
CVE-2025-13220
Risk Score