ultimatemember

Records77All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high21CVSS 7.0–8.9

Exploited now

ultimatemember records in CISA KEV

No ultimatemember vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ultimate Member 37 records CRITICAL User Profile & Membership 7 records LOW Forumwp 4 records MEDIUM Jobboardwp 4 records HIGH Ultimatemember 1 record LOW

Records

1 record in Ultimatemember · all components

TI-2018-05071 CVE-2018-6943 · GHSA-39g2-6pv8-xcjv

core/lib/upload/um-image-upload.php in the UltimateMember plugin 2.0 for WordPress has a…

LOW 29

core/lib/upload/um-image-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitize user input passed to the $temp variable.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01045 Published 2018-02-16 No fix listed CWE-79

Open these records in search →

Critical	7
High	21
Medium	49
Low	0
No CVSS	0