Read the docs

UserElements

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

UserElements records in CISA KEV

No UserElements vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-40641 CVE-2025-66116 · GHSA-6cww-qhvw-jff7

WordPress Ultimate Member Widgets for Elementor plugin <= 2.3 - Sensitive Data Exposure vulnerability

Priority LOW 39

Insertion of Sensitive Information Into Sent Data vulnerability in UserElements Ultimate Member Widgets for Elementor ultimate-member-widgets-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Ultim…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00283 Published 2025-12-18 No fix listed CWE-201
TI-2025-11711 CVE-2025-12778 · GHSA-jw5f-c33c-4p34

Ultimate Member Widgets for Elementor <= 2.3 - Missing Authorization to Unauthenticated Information Exposure

Priority LOW 30

The Ultimate Member Widgets for Elementor – WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_filter_users function in all versions…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00256 Published 2025-11-20 No fix listed CWE-862
Open these records in search →