cleantalk
Vulnerabilities and Security Researches

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin, CVE-2016-10872

CVE, Research URL

CVE-2016-10872

Published on
Aug 12, 2019
Research Description
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.
Affected versions
max 1.3.40.
Status
vulnerable