Access violation vulnerability in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 1.0.84

The Ultimate Member plugin is a plugin used for WordPress websites. Unfortunately, it had a security flaw in versions up to version 1.0.83. This flaw allowed unauthenticated attackers to delete or upload any files on the website, which should otherwise not have been possible. This flaw has since been fixed.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.