Known vulnerabilities in Unknown Ultimate Multisite
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-107508 | The Ultimate Multisite WordPress plugin before 2.17.2 does not validate a user-supplied value used to select a file… | 8.6 High | Oct 14, 2026 |
| CVE-2026-103646 | The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is… | 9.8 Critical | Oct 8, 2026 |