Ultimate Member

Missing Authorization to Authenticated (Subscriber+) Arbitrary User Profile Picture Update vulnerability <= 2.8.9

4.3

21 November, 2024

CrossSite Request Forgery to Membership Status Change vulnerability <= 2.8.6

5.3

4 October, 2024

Authenticated (Contributor+) Stored CrossSite Scripting vulnerability <= 2.8.6

6.5

4 October, 2024

Authenticated (Subscriber+) Stored CrossSite Scripting vulnerability <= 2.8.4

6.5

15 April, 2024

Unauthenticated Stored CrossSite Scripting vulnerability <= 2.8.3

7.1

8 March, 2024