cleantalk
Vulnerabilities and Security Researches

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin, 6e258728caeed0fd59e4954753924bb80c732e25

Published on
Jul 13, 2019
Research Description
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &amp; Membership Plugin [ultimate-member] < 2.0.52 WordPress Ultimate Member plugin <= 2.0.51 - Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) vulnerabilities Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) vulnerabilities found by m0ns7er in WordPress Ultimate Member plugin (versions <= 2.0.51).
Affected versions
max 2.0.52.
Status
vulnerable