Ultimate Member

Information Exposure vulnerability <= 2.9.1

5.3

4 days ago

Unauthenticated SQL Injection vulnerability <= 2.9.1

9.3

4 days ago

Missing Authorization to Authenticated (Subscriber+) Arbitrary User Profile Picture Update vulnerability <= 2.8.9

4.3

21 November, 2024

CrossSite Request Forgery to Membership Status Change vulnerability <= 2.8.6

5.3

4 October, 2024

Authenticated (Contributor+) Stored CrossSite Scripting vulnerability <= 2.8.6

6.5

4 October, 2024