Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.10.3

    Fixed

    The plugin called "The Ultimate Member" used for creating user profiles, registration, login, member directories, and restricting content on WordPress websites is at risk of being exploited. This is ...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.10.1

    Fixed

    A popular plugin for WordPress called Ultimate Member has a security vulnerability that allows attackers to access sensitive information from the website's database. This happens because the plugin d...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.10.0

    Fixed

    A popular plugin for WordPress called Ultimate Member, which helps users manage their profiles, registrations, logins, and memberships, has a security flaw that could put sensitive information at ris...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.9.2

    Fixed

    The Ultimate Member plugin for WordPress has a security vulnerability that allows attackers to manipulate filenames and inject additional SQL queries, potentially accessing sensitive information from...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.9.1

    Fixed

    The WordPress plugin called "Ultimate Member" has a security issue where hackers can inject code into the search function and access private information from the website's database. This vulnerabili...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.9.1

    Fixed

    The Ultimate Member plugin for WordPress has a security issue that allows attackers to access user data without authentication. This can happen through error messages in the responses, making it poss...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.8.9

    Fixed

    The "Ultimate Member" plugin for WordPress allows users to create profiles, register, login, and restrict content. However, it has a security vulnerability that allows unauthorized updates to profile...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.8.6

    Fixed

    A popular WordPress plugin called "Ultimate Member" has a security issue that allows hackers to insert harmful code into certain pages. This can only be done by someone who has permission to contribu...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.8.6

    Fixed

    The Ultimate Member plugin for WordPress has a vulnerability that could allow hackers to change a user's membership status without proper authorization. This is because the plugin does not properly v...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.8.4

    Fixed

    The Ultimate Member plugin for WordPress, which is used for creating user profiles, registration, login, member directories, and restricting content, has a security vulnerability. This vulnerability,...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.8.3

    Fixed

    The Ultimate Member plugin for WordPress is not secure and can be exploited by hackers. This can happen through certain parameters, allowing the hacker to add malicious code to a page that will run w...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.8.2

    Fixed

    A popular plugin called "Ultimate Member" for WordPress has a security vulnerability that could allow hackers to access sensitive information from the website's database. This is because the plugin d...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.6.8

    Fixed

    The Ultimate Member plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery which affects versions up to and including 2.6.8. This is because the admin_init function ...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.6.6

    Fixed

    The Ultimate Member plugin for WordPress is vulnerable to a security issue that could allow unauthenticated attackers to gain access to a site as an administrator. This is a problem in versions of th...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.6.0

    Fixed

    The Ultimate Member plugin for WordPress, which is used to create forms, is vulnerable to exploitation in versions 2.6.0 and before. This means that an attacker could potentially duplicate forms crea...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.40

    Fixed

    A security flaw in the Ultimate Member plugin (version 2.0.40 or earlier) for WordPress could allow attackers to access administrator accounts

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.3

    Fixed

    The Ultimate Member plugin for WordPress

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.4.1

    Fixed

    The Ultimate Member plugin for WordPress is a vulnerable software that can be exploited by unauthenticated attackers to obtain a list of users on a given website, including their usernames. This vuln...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.1.12

    Fixed

    A security issue was found in the Ultimate Member plugin before version 2.1.12 for WordPress. It allowed someone with access to the profile.php page to upgrade their user role (for example

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.4

    Fixed

    A security issue was found in a plugin called Ultimate Member

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.1.12

    Fixed

    A security problem was found in the Ultimate Member plugin before version 2.1.12 for WordPress. It allowed an unauthorized person to gain access to higher levels of control in the system. To do this

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.5.0

    Fixed

    The Ultimate Member plugin for WordPress has a security vulnerability that can allow attackers with administrative rights to execute code on the server. This vulnerability affects versions up to and i...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.39

    Fixed

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.1.7

    Fixed

    The Ultimate Member plugin for WordPress is vulnerable to a security issue called "open redirects". This issue exists in versions of the plugin up to, and including, 2.1.6. This means that attackers ...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.3.1

    Fixed

    The Ultimate Member plugin for WordPress has a security flaw that could be used to trick people into going to unwanted websites. The problem is caused by not checking the links that are put into the s...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.3

    Fixed

    The Ultimate Member plugin for WordPress

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.45

    Fixed

    The Ultimate Member plugin for WordPress is not secure in versions up to 2.0.45. Attackers with low privilege can exploit it to insert malicious code into webpages. This malicious code will run whene...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.5.0

    Fixed

    The Ultimate Member plugin for WordPress is vulnerable to a security risk called Remote Code Execution. This means that someone with malicious intent and access to the plugin can run code on the serve...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 1.3.65

    Fixed

    The Ultimate Member plugin for WordPress is vulnerable to a security issue known as Local File Inclusion. This affects versions 1.3.64 and lower of the plugin. An unauthenticated attacker can include...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.1.20

    Fixed

    The Ultimate Member plugin for WordPress (used to create user profiles

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.1.13

    Fixed

    The Ultimate Member plugin

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.51

    Fixed

    The Ultimate Member plugin

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.4

    Fixed

    The Ultimate Member plugin for WordPress has a security issue. If you are using a version before 2.0.4

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 1.3.83

    Fixed

    The Ultimate Member plugin for WordPress is vulnerable to unauthenticated attackers executing arbitrary code. This is because versions up to and including 1.3.83 have a feature called 'ultimatemember...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.27

    Fixed

    The Ultimate Member - User Profile & Membership plugin before version 2.0.28 for WordPress has weaknesses which may allow malicious people to inject dangerous code into a website. This code could be u...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0

    Fixed

    The UltimateMember plugin 2.0 for WordPress contains a security flaw which could allow someone to add malicious code to websites using the plugin. This is because it does not properly check the data e...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.22

    Fixed

    The Ultimate Member plugin for WordPress is vulnerable to a security issue that allows attackers to inject malicious web scripts into a website. This issue affects versions of the plugin up to and in...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.51

    Fixed

    The Ultimate Member plugin for WordPress had a security issue where someone could take control of an account if the user tried to upgrade it. This issue has been fixed in version 2.0.52.

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 1.3.40

    Fixed

    The Ultimate Member plugin for WordPress

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.32

    Fixed

    The Ultimate Member plugin for WordPress is vulnerable to a type of cyber attack called Cross-Site Request Forgery. This is a vulnerability that exists in versions up to 2.0.32 of the plugin. It is c...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 1.3.29

    Fixed

    A security issue was recently discovered in a WordPress plugin called Ultimate Member. This issue allows someone to inject malicious code

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.7

    Fixed

    The User Profile & Membership plugin for WordPress before version 2.0.7 had security weaknesses which could have allowed someone to gain access to parts of the plugin they shouldn't have. This was a w...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.3.2

    Fixed

    The Ultimate Member plugin for WordPress has a security flaw that can be exploited by users to inject malicious web scripts into the Biography field on individual user profile pages. This vulnerabilit...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.5.0

    Fixed

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 1.3.75

    Fixed

    The Ultimate Member plugin for WordPress is vulnerable to a security issue. Attackers who are not authenticated can change the passwords of any user of the vulnerable version of this plugin. This sec...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 1.3.17

    Fixed

    The Ultimate Member plugin for WordPress (a type of software used to create websites) had a security flaw up until version 1.3.18 that could potentially allow an attacker to put malicious code into a ...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.1.3

    Fixed

    The Ultimate Member plugin for WordPress

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.53

    Fixed

    The Ultimate Member plugin

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.45

    Fixed

    The Ultimate Member – User Profile, User Registration, Login & Membership Plugin is a plugin for the WordPress website platform that allows users to create profiles and register for accounts. Unfor...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.3

    Fixed

    A flaw in the Ultimate Member plugin for WordPress, version 2.0.4 and earlier, allowed remote authenticated users to upload any type of image file to a website. It is not known how the users exploite...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.17

    Fixed

    The Ultimate Member plugin for WordPress

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.22

    Fixed

    The Arbitrary File Upload plugin for WordPress is a plugin that is vulnerable to malicious activity. This vulnerability affects versions of the plugin up to and including 2.0.21. Attackers can use th...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.46

    Fixed

    The Ultimate Member plugin for WordPress has a security vulnerability in versions up to, and including, 2.0.45. This vulnerability allows an attacker with administrative level access to inject malici...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 1.2.997

    Fixed

    The Ultimate Member plugin for WordPress is vulnerable to a type of cyber attack called Reflected Cross-Site Scripting. This attack can be used to inject malicious code into web pages. It affects ver...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.4.0

    Fixed

    The Ultimate Member plugin is a plugin for websites that use WordPress, a popular website-building platform. Unfortunately, versions of the plugin up to and including version 2.4.0 have a security vu...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.4

    Fixed

    The UltimateMember plugin 2.0 for WordPress has a security issue that could allow malicious users to inject code into the website. This vulnerability occurs because the plugin does not filter out user...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.39

    Fixed

    A security issue was discovered in a plugin called Ultimate Member

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.11

    Fixed

    A security issue was found in the User Profile & Membership plugin before version 2.0.11 for WordPress. This issue allowed a malicious user to run a type of code called ""Cross site Scripting"" on the...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.4

    Fixed

    The Ultimate Member plugin for WordPress has a security flaw that could let attackers make changes to other user profiles. This vulnerability affects versions of the plugin before 2.0.4. If a maliciou...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.1.12

    Fixed

    A security problem was found in the Ultimate Member plugin

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 1.0.84

    Fixed

    The Ultimate Member plugin is a plugin used for WordPress websites. Unfortunately, it had a security flaw in versions up to version 1.0.83. This flaw allowed unauthenticated attackers to delete or up...

    Read More
  • Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 1.3.88

    Fixed

    A security vulnerability was found in an Ultimate Member plugin for WordPress websites. This vulnerability could allow someone to remotely place unwanted web scripts or HTML on a WordPress website. Th...

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.5.0

    Fixed

    The Ultimate Member plugin for WordPress has a security issue in versions 2.5.0 and below. If someone with administrative access to the plugin can provide an incorrect path

    Read More
  • Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.40

    Fixed

    Read More