RSS   Podatności dla 'Ultimate member'   RSS

2022-06-13
 
CVE-2022-1208

CWE-79
 
 
The Ultimate Member plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Biography field featured on individual user profile pages due to insufficient input sanitization and output escaping that allows users to encode malicious web scripts with HTML encoding that is reflected back on the page. This affects versions up to, and including, 2.3.2. Please note this issue was partially fixed in version 2.3.2 then subsequently fully patched in version 2.3.3.

 
2022-05-10
 
CVE-2022-1209

CWE-601
 
 
The Ultimate Member plugin for WordPress is vulnerable to open redirects due to insufficient validation on supplied URLs in the social fields of the Profile Page, which makes it possible for attackers to redirect unsuspecting victims in versions up to, and including, 2.3.1 granted the victim clicks on a social icon on a user's profile page.

 
2021-01-06
 
CVE-2020-36170

NVD-CWE-noinfo
 
 
The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms.

 
2021-01-04
 
CVE-2020-36157

CWE-269
 
 
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that could be supplied during the registration process, an attacker could supply the role parameter with a WordPress capability (or any custom Ultimate Member role) and effectively be granted those privileges.

 
 
CVE-2020-36156

CWE-269
 
 
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-admin access to the profile.php page could supply the parameter um-role with a value set to any role (e.g., Administrator) during a profile update, and effectively escalate their privileges.

 
 
CVE-2020-36155

CWE-269
 
 
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wp_capabilities user meta that defines a user's role. During the registration process, submitted registration details were passed to the update_profile function, and any metadata was accepted, e.g., wp_capabilities[administrator] for Administrator access.

 
2020-01-13
 
CVE-2020-6859

CWE-639
 
 
Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remote attackers to change other users' profiles and cover photos via a modified user_id parameter. This is related to ajax_image_upload and ajax_resize_image.

 
2019-08-12
 
CVE-2019-14947

CWE-79
 
 
The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade.

 
 
CVE-2019-14946

CWE-79
 
 
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations.

 
 
CVE-2019-14945

CWE-79
 
 
The ultimate-member plugin before 2.0.54 for WordPress has XSS.

 

Copyright 2024, cxsecurity.com

 

Back to Top