cleantalk
Vulnerabilities and Security Researches

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin, 18115d096029483854e2d599e1202afb74ef3962

Published on
Dec 02, 2015
Research Description
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &amp; Membership Plugin [ultimate-member] < 1.3.29 WordPress Ultimate Member Plugin <= 1.3.28 - Reflected Cross Site Scripting Because of this vulnerability, attackers cat steal administrator's cookies, credentials and browser history and modify web page content to perform phishing attacks. Update the plugin.
Affected versions
max 1.3.29.
Status
vulnerable