| CVE-2026-85680 |
The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names…
|
8.8
High
|
Sep 19, 2026 |
| CVE-2026-19251 |
The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the…
|
5.3
Medium
|
Sep 2, 2026 |
| CVE-2026-19423 |
The Ultimate Member WordPress plugin before 2.13.0 does not validate a submitted role selection when it cannot…
|
8.1
High
|
Aug 28, 2026 |
| CVE-2026-12251 |
The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it…
|
8.1
High
|
Jul 31, 2026 |
| CVE-2026-11766 |
The Ultimate Member WordPress plugin before 2.12.0 does not properly sanitise and escape the value of custom textarea…
|
8.0
High
|
Jul 6, 2026 |
| CVE-2023-3460 |
The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary…
|
Not rated
|
Jul 4, 2023 |