Unknown Ultimate Member

3 known vulnerabilities in Unknown Ultimate Member, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-85680 CVSS 8.8 high The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names before outputting it…
  • CVE-2026-19251 CVSS 5.3 medium The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the profile it belongs…
  • CVE-2026-19423 CVSS 8.1 high The Ultimate Member WordPress plugin before 2.13.0 does not validate a submitted role selection when it cannot resolve the set of roles a…