Read the docs

SuitePlugins

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

SuitePlugins records in CISA KEV

No SuitePlugins vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2024-36458 CVE-2024-54370 · GHSA-v3jg-qf5j-54wh

WordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.0 - Arbitrary File Upload vulnerability

Priority MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows Upload a Web Shell to a Web Server.This issue affects Video & Pho…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00665 Published 2024-12-16 No fix listed CWE-434
TI-2025-22160 CVE-2025-30890 · GHSA-fhpg-4j4x-74cv

WordPress Login Widget for Ultimate Member plugin <= 1.1.2 - Local File Inclusion vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SuitePlugins Login Widget for Ultimate Member login-widget-for-ultimate-member allows PHP Local Fil…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00805 Published 2025-03-27 No fix listed CWE-98
TI-2025-23219 CVE-2025-32121 · GHSA-5v3v-4xvw-m8wx

WordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.3 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows SQL Injection.This issue aff…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00593 Published 2025-04-04 No fix listed CWE-89
TI-2024-11277 CVE-2024-12162 · GHSA-6hq4-g88r-rhx7

Video & Photo Gallery for Ultimate Member <= 1.1.1 - Reflected Cross-Site Scripting

Priority LOW 27

The Video & Photo Gallery for Ultimate Member plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.1 due to insufficient input sanitizati…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00417 Published 2024-12-12 No fix listed CWE-79
TI-2025-16554 CVE-2025-22672 · GHSA-36xc-3g6q-fjj6

WordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.2 - Server Side Request Forgery (SSRF) vulnerability

Priority LOW 22

Server-Side Request Forgery (SSRF) vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows Server Side Request Forgery.This issue affects Video & Photo Gallery for Ultim…

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00192 Published 2025-03-27 No fix listed CWE-918
Open these records in search →