Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin, 569894e030acbd88c54552bc45d595a9d6238385

CVE, Research URL: 569894e030acbd88c54552bc45d595a9d6238385
Home page URL: Security reports for Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Application: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Published on: Jul 14, 2022
Research Description: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.4.2 Ultimate Member <= 2.4.1 - Username Enumeration The Ultimate Member plugin for WordPress is vulnerable to Username Enumeration in versions up to, and including, 2.4.1 via the um_get_members ajax action. This allows unauthenticated attackers to obtain a list of users including user names on that site.
Affected versions: max 2.4.2.
Status: vulnerable

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &amp; Membership Plugin, 569894e030acbd88c54552bc45d595a9d6238385