CVE-2026-19251— Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile Activity
Quick assessment
Affected
Unknown Ultimate Member
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WordPress 插件 The Ultimate Member 在 2.13.0 之前的版本中，在向未认证访客返回个人资料活动信息前，未检查该评论是否已通过审核，也未检查其所属的个人资料是否为私有，导致未认证的访客能够读取仍处于待审核状态的评论内容。
Possible ATT&CK Techniques 1 AI
T1595 · Active ScanningAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Ultimate Member | < 2.13.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-19251
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile Activity
Source: CVE Program / CVE List V5
Vulnerability Description
The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the profile it belongs to is private, before returning profile activity to unauthenticated visitors, allowing them to read the content of comments still awaiting moderation.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Unknown | Ultimate Member | 0 ~ 2.13.0 | - |
|
II. Public POCs for CVE-2026-19251
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19251
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-19251 (1)
-
🔗 Ultimate Member < 2.13.0 – Unauthenticated Unapproved Comment Disclosure via Profile Activity | CVE 2026-19251 | Plugin Vulnerabilities Read full article exploit vdb-entry technical-description
Same Patch Batch · Unknown · 2026-09-02 · 66 CVEs total
| CVE-2026-4357 | 10.0 CRITICAL | Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload |
| CVE-2026-77009 | 9.9 CRITICAL | WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console |
| CVE-2025-9314 | 9.8 CRITICAL | Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File Upload |
| CVE-2025-15485 | 8.2 HIGH | Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call |
| CVE-2026-83547 | 6.8 MEDIUM | Xpro Elementor Addons 1.6.0 - 1.7.3 - Contributor+ Stored XSS via Multiple Widgets |
| CVE-2026-82884 | 6.8 MEDIUM | All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant Block |
| CVE-2026-10821 | 6.6 MEDIUM | Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE |
| CVE-2026-2688 | 6.5 MEDIUM | CM HIPAA Forms < 3.2.0 - Unauthenticated Authorization Bypass |
| CVE-2024-3773 | 5.9 MEDIUM | LiveJournal Shortcode <= 1.1.1 - Contributor+ Stored XSS via Shortcode |
| CVE-2026-2811 | 5.4 MEDIUM | Ajaxify Comments < 3.2 - Unauthenticated HTTP Header Injection |
| CVE-2026-8151 | 5.4 MEDIUM | Simple Membership MailChimp Integration < 1.9.8 - API Key Update via CSRF |
| CVE-2025-15481 | 5.3 MEDIUM | Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure |
| CVE-2026-17563 | 5.3 MEDIUM | WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form |
| CVE-2025-8945 | 5.3 MEDIUM | Wp Edit Password Protected < 1.3.5 - Protection Bypass via REST API |
| CVE-2025-15490 | 5.3 MEDIUM | Passster < 4.2.26 - Global Protection Bypass |
| CVE-2026-77793 | 5.3 MEDIUM | RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field |
| CVE-2026-77794 | 5.3 MEDIUM | RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity |
| CVE-2025-15489 | 5.3 MEDIUM | Passster < 4.2.24 - Password Protection Bypass |
| CVE-2026-83533 | 5.3 MEDIUM | WP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment |
| CVE-2026-78153 | 5.3 MEDIUM | Restrict User Access 2.6 - 2.8 - Unauthenticated Content Protection Bypass via REST API Ro |
Showing top 20 of 66 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Ultimate Member
-
CVE-2026-96539
WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escal -
CVE-2026-96451
WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escal -
CVE-2026-62059
WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection v -
CVE-2026-85680
Ultimate Member < 2.13.1 - Unauthenticated Stored XSS via Pr -
CVE-2026-19423
Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege E
Same vendor: Unknown
-
CVE-2026-110527
WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creat -
CVE-2026-97314
ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affi -
CVE-2026-81344
Frontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object -
CVE-2026-81343
Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated AC -
CVE-2026-106470
WP Data Access < 5.5.88 - Subscriber+ SSRF
V. Comments for CVE-2026-19251
No comments yet