Search Results (63 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2018-0585 1 Ultimatemember 1 Ultimate Member 2024-11-21 N/A
Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-10872 1 Ultimatemember 1 Ultimate Member 2024-11-21 6.1 Medium
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.
CVE-2015-9304 1 Ultimatemember 1 Ultimate Member 2024-11-21 6.1 Medium
The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input.