Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.0.22

  • Severity: medium-risk
  • Status: Fixed
  • Publication: August 9, 2018

The Ultimate Member plugin for WordPress is vulnerable to a security issue that allows attackers to inject malicious web scripts into a website. This issue affects versions of the plugin up to and including version 2.0.21, due to the plugin not properly protecting user input or properly escaping output. If exploited, these scripts can run in a user’s web browser and potentially cause harm.

Detected in:

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin fixed vulnerable versions: >= * < 2.0.22

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.