İçeriğe atla
Noroxi

ultimatemember kayıtları

ultimatemember üreticisine ait 53 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %1,9
Pre-auth RCE
1
Düzeltme kaydı olan
%9,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

53 kayıt
  • CVE-2024-1071
    66Bu hafta

    The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is v

    KritikCVSS 9,8SilahlaştırılmışEPSS %89

    ultimatemember · ultimate member13 Mar 2024

  • CVE-2023-3460
    61Bu hafta

    Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation

    KritikCVSS 9,8Kavram kanıtıEPSS %72

    ultimatemember · ultimate member4 Tem 2023

  • CVE-2020-36155
    42Planlayın

    An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta.

    KritikCVSS 9,8Kavram kanıtıEPSS %9

    ultimatemember · ultimate member4 Oca 2021

  • CVE-2020-36157
    40Planlayın

    An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles.

    KritikCVSS 9,8İstismar yokEPSS %2

    ultimatemember · ultimate member4 Oca 2021

  • CVE-2024-54367
    39İzleyin

    WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ultimatemember · forumwp16 Ara 2024

  • CVE-2020-36156
    36İzleyin

    An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update

    YüksekCVSS 8,8İstismar yokEPSS %2

    ultimatemember · ultimate member4 Oca 2021

  • CVE-2019-10673
    36İzleyin

    A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress allows attackers to b

    YüksekCVSS 8,8İstismar yokEPSS %1

    ultimatemember · ultimate member3 Nis 2019

  • CVE-2019-10270
    35İzleyin

    An arbitrary password reset issue was discovered in the Ultimate Member plugin 2.39 for WordPress.

    YüksekCVSS 8,8İstismar yokEPSS %1

    ultimatemember · ultimate member21 Haz 2019

  • CVE-2018-10233
    35İzleyin

    The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks.

    YüksekCVSS 8,8İstismar yokEPSS %0

    ultimatemember · user profile \& membership23 Nis 2018

  • CVE-2023-23715
    35İzleyin

    WordPress JobBoardWP – Job Board Listings and Submissions plugin <= 1.2.2 - IDOR Leading To Job Removal Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    ultimatemember · jobboardwp9 Ara 2024

  • CVE-2024-8428
    35İzleyin

    ForumWP – Forum & Discussion Board Plugin <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover

    YüksekCVSS 8,8İstismar yokEPSS %0

    ultimatemember · forumwp6 Eyl 2024

  • CVE-2023-31216
    35İzleyin

    WordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    ultimatemember · ultimate member17 Tem 2023

  • CVE-2024-2123
    32İzleyin

    Ultimate Member <= 2.8.3 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %26

    ultimatemember · ultimate member13 Mar 2024

  • CVE-2018-0588
    31İzleyin

    Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attacker

    YüksekCVSS 7,5İstismar yokEPSS %2

    ultimatemember · user profile \& membership14 May 2018

  • CVE-2022-4061
    30İzleyin

    JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    ultimatemember · jobboardwp19 Ara 2022

  • CVE-2022-3966
    30İzleyin

    Ultimate Member Plugin Template class-shortcodes.php load_template pathname traversal

    YüksekCVSS 7,5İstismar yokEPSS %0

    ultimatemember · ultimate member13 Kas 2022

  • CVE-2025-0308
    30İzleyin

    Ultimate Member <= 2.9.1 - Unauthenticated SQL Injection

    YüksekCVSS 7,5İstismar yokEPSS %0

    ultimatemember · ultimate member18 Oca 2025

  • CVE-2022-3383
    29İzleyin

    Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Remote Code Execution via Multi-Select

    YüksekCVSS 7,2İstismar yokEPSS %3

    ultimatemember · ultimate member29 Kas 2022

  • CVE-2022-3384
    29İzleyin

    Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um_populate_dro

    YüksekCVSS 7,2İstismar yokEPSS %2

    ultimatemember · ultimate member29 Kas 2022

  • CVE-2024-12276
    26İzleyin

    Ultimate Member <= 2.9.2 - Authenticated SQL Injection

    OrtaCVSS 6,5İstismar yokEPSS %0

    ultimatemember · ultimate member21 Şub 2025

  • CVE-2015-8354
    25İzleyin

    Cross-site scripting (XSS) vulnerability in the Ultimate Member WordPress plugin before 1.3.29 for WordPress allows remote attackers to inje

    OrtaCVSS 6,1İstismar yokEPSS %2

    ultimatemember · ultimate member11 Eyl 2017

  • CVE-2018-17866
    24İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membershi

    OrtaCVSS 6,1İstismar yokEPSS %1

    ultimatemember · ultimate member9 Eki 2018

  • CVE-2018-13136
    24İzleyin

    The Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen.

    OrtaCVSS 6,1İstismar yokEPSS %1

    ultimatemember · ultimate member4 Tem 2018

  • CVE-2018-6944
    24İzleyin

    core/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails

    OrtaCVSS 6,1İstismar yokEPSS %1

    ultimatemember · ultimate member16 Şub 2018

  • CVE-2016-10872
    24İzleyin

    The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.

    OrtaCVSS 6,1İstismar yokEPSS %1

    ultimatemember · ultimate member12 Ağu 2019