Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin, 0b1c574c20a1c7b057a6af8d49f36be74529169b
- CVE, Research URL
- Published on
- Aug 09, 2023
- Research Description
- Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.6.9 WordPress Ultimate Member Plugin <= 2.6.8 is vulnerable to Cross Site Request Forgery (CSRF) Update the WordPress Ultimate Member plugin to the latest available version (at least 2.6.9). WordFence discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Ultimate Member Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has been fixed in version 2.6.9.
- Affected versions
-
max 2.6.9.
- Status
-
vulnerable