Ultimate Member

Authenticated SQL Injection vulnerability <= 2.9.2

8.5

2 days ago

Information Exposure vulnerability <= 2.9.1

5.3

17 January, 2025

Unauthenticated SQL Injection vulnerability <= 2.9.1

9.3

17 January, 2025

Missing Authorization to Authenticated (Subscriber+) Arbitrary User Profile Picture Update vulnerability <= 2.8.9

4.3

21 November, 2024

CrossSite Request Forgery to Membership Status Change vulnerability <= 2.8.6

5.3

4 October, 2024