Ultimate Member

Unauthenticated SQL Injection via search Parameter vulnerability <= 2.10.0

9.3

4 March, 2025

Authenticated SQL Injection vulnerability <= 2.9.2

8.5

20 February, 2025

Information Exposure vulnerability <= 2.9.1

5.3

17 January, 2025

Unauthenticated SQL Injection vulnerability <= 2.9.1

9.3

17 January, 2025

Missing Authorization to Authenticated (Subscriber+) Arbitrary User Profile Picture Update vulnerability <= 2.8.9

4.3

21 November, 2024