The plugin called Video & Photo Gallery for Ultimate Member in WordPress has a security issue. This allows people who are logged in and have at least Subscriber-level access to upload any type of file they want, even harmful ones. This could potentially let them run code on the website’s server, causing damage.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
