Read the docs

ultimatemember

Records77All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9

Exploited now

ultimatemember records in CISA KEV

No ultimatemember vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ultimate Member 37 records CRITICAL User Profile & Membership 7 records LOW Forumwp 4 records MEDIUM Jobboardwp 4 records HIGH Ultimatemember 1 record LOW

Records

4 records in Jobboardwp · all components

TI-2022-03726 CVE-2022-4061 · GHSA-3459-2j34-8x8g

JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload

Priority HIGH 72

The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01421 Published 2022-12-19 Fixed in 1.2.2
TI-2023-09529 CVE-2023-23715 · GHSA-crfq-94qw-vfrw

WordPress JobBoardWP – Job Board Listings and Submissions plugin <= 1.2.2 - IDOR Leading To Job Removal Vulnerability

Priority LOW 39

Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoardWP – Job Board Listings…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0055 Published 2024-12-09 No fix listed CWE-862
TI-2024-10086 CVE-2024-10880 · GHSA-6j2m-wpqq-823h

JobBoardWP – Job Board Listings and Submissions <= 1.3.0 - Reflected Cross-Site Scripting

Priority LOW 28

The JobBoardWP – Job Board Listings and Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all v…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00504 Published 2024-11-23 No fix listed CWE-79
TI-2021-16698 CVE-2021-39329 · GHSA-f6xv-f8g8-2ffj

JobBoardWP – Job Board Listings and Submissions <= 1.0.7 Authenticated Stored Cross-Site Scripting

Priority LOW 27

The JobBoardWP WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/includes/admin/class-metabox.php file which allowed…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01037 Published 2021-10-19 No fix listed CWE-79
Open these records in search →