| CVE-2026-85680 |
The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names…
|
8.8
Élevée
|
19 sept. 2026 |
| CVE-2026-19251 |
The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the…
|
5.3
Moyenne
|
2 sept. 2026 |
| CVE-2026-19423 |
The Ultimate Member WordPress plugin before 2.13.0 does not validate a submitted role selection when it cannot…
|
8.1
Élevée
|
28 août 2026 |
| CVE-2026-12251 |
The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it…
|
8.1
Élevée
|
31 juil. 2026 |
| CVE-2026-11766 |
The Ultimate Member WordPress plugin before 2.12.0 does not properly sanitise and escape the value of custom textarea…
|
8.0
Élevée
|
6 juil. 2026 |
| CVE-2023-3460 |
The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary…
|
Non notée
|
4 juil. 2023 |