Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Ultimate Member - Information Disclosure (CVE-2025-12492)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due to the use of a predictable low-entropy token (5 hex characters derived from md5 of post ID) to identify member directories and insufficient authorization checks on the unauthenticated AJAX endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, display names, user roles (including administrator accounts), profile…
PLUGIN
Ultimate Member
CVE-2025-12492
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Security Vulnerability (CVE-2025-14081)
The Ultimate Member plugin for WordPress is vulnerable to Profile Privacy Setting Bypass in all versions up to, and including, 2.11.0. This is due to a flaw in the secure fields mechanism where field keys are stored in the allowed fields list before the `required_perm` check is applied during rendering. This makes it possible for authenticated attackers with Subscriber-level access to modify their profile privacy settings (e.g., setting profile to "Only me") via direct parameter manipulation, even when the administrator has explicitly disabled the option for their role.
PLUGIN
Ultimate Member
CVE-2025-14081
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Cross-Site Scripting (XSS) (CVE-2025-13217)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the YouTube Video 'value' field in all versions up to, and including, 2.11.0. This is due to insufficient input sanitization and output escaping on user-supplied YouTube video URLs in the `um_profile_field_filter_hook__youtube_video()` function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that execute whenever a user accesses the injected user's profile page.
PLUGIN
Ultimate Member
CVE-2025-13217
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Remote Code Execution (CVE-2025-47691)
Improper Control of Generation of Code ('Code Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Code Injection.This issue affects Ultimate Member: from n/a through
PLUGIN
Ultimate Member
CVE-2025-47691
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - SQL Injection (CVE-2025-1702)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'search' parameter in all versions up to, and including, 2.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
PLUGIN
Ultimate Member
CVE-2025-1702
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - SQL Injection (CVE-2024-12276)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to second-order SQL Injection via filenames in all versions up to, and including, 2.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with access to upload files and manage filenames through a third-party plugin like a File Manager, to append additional SQL queries into already existing queries that can be used to…
PLUGIN
Ultimate Member
CVE-2024-12276
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Information Disclosure (CVE-2025-0318)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.9.1 through different error messages in the responses. This makes it possible for unauthenticated attackers to exfiltrate data from wp_usermeta table.
PLUGIN
Ultimate Member
CVE-2025-0318
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - SQL Injection (CVE-2025-0308)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the search parameter in all versions up to, and including, 2.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
PLUGIN
Ultimate Member
CVE-2025-0308
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Broken Access Control (CVE-2024-10528)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to unauthorized profile picture updates due to a missing capability check on the wp_ajax_um_resize_image() and ajax_resize_image() functions in all versions up to, and including, 2.8.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the profile pictures of other users.
PLUGIN
Ultimate Member
CVE-2024-10528
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Cross-Site Scripting (XSS) (CVE-2024-8519)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'um_loggedin' shortcode in all versions up to, and including, 2.8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Ultimate Member
CVE-2024-8519
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Cross-Site Request Forgery (CSRF) (CVE-2024-8520)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.6. This is due to missing or incorrect nonce validation on the admin_init or user_action_hook function. This makes it possible for unauthenticated attackers to modify a users membership status via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
PLUGIN
Ultimate Member
CVE-2024-8520
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Cross-Site Scripting (XSS) (CVE-2024-2765)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Skype and Spotify URL parameters in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Ultimate Member
CVE-2024-2765
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - SQL Injection (CVE-2024-1071)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in versions 2.1.3 to 2.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
PLUGIN
Ultimate Member
CVE-2024-1071
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Cross-Site Scripting (XSS) (CVE-2024-2123)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several parameters in all versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Ultimate Member
CVE-2024-2123
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member plugin - Cross-Site Request Forgery (CSRF) (CVE-2023-31216)
Cross-Site Request Forgery (CSRF) vulnerability in Ultimate Member plugin
PLUGIN
Ultimate Member plugin
CVE-2023-31216
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Security Vulnerability (CVE-2023-3460)
The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This is actively being exploited in the wild.
PLUGIN
Ultimate Member
CVE-2023-3460
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Remote Code Execution (CVE-2022-3384)
The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the populate_dropdown_options function that accepts user supplied input and passes it through call_user_func(). This is restricted to non-parameter PHP functions like phpinfo(); since user supplied parameters are not passed through the function. This makes it possible for authenticated attackers, with administrative privileges, to execute code on the server.
PLUGIN
Ultimate Member
CVE-2022-3384
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Remote Code Execution (CVE-2022-3383)
The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the get_option_value_from_callback function that accepts user supplied input and passes it through call_user_func(). This makes it possible for authenticated attackers, with administrative capabilities, to execute code on the server.
PLUGIN
Ultimate Member
CVE-2022-3383
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Remote Code Execution (CVE-2022-3361)
The Ultimate Member plugin for WordPress is vulnerable to directory traversal in versions up to, and including 2.5.0 due to insufficient input validation on the 'template' attribute used in shortcodes. This makes it possible for attackers with administrative privileges to supply arbitrary paths using traversal (../../) to access and include files outside of the intended directory. If an attacker can successfully upload a php file then remote code execution via inclusion may also be possible. Note: for users with less than administrative capabilities, /wp-admin access needs to be enabled for…
PLUGIN
Ultimate Member
CVE-2022-3361
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Member - Cross-Site Scripting (XSS) (CVE-2022-1208)
The Ultimate Member plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Biography field featured on individual user profile pages due to insufficient input sanitization and output escaping that allows users to encode malicious web scripts with HTML encoding that is reflected back on the page. This affects versions up to, and including, 2.3.2. Please note this issue was only partially fixed in version 2.3.2.
PLUGIN
Ultimate Member
CVE-2022-1208
Risk Score