目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1359 元

100%

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 产品漏洞列表 / CVE 中文分析 28

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 产品相关 28 条漏洞,AI 中文标题与摘要、CVSS、POC 一站汇总。

该页面聚合了WordPress插件Ultimate Member的安全漏洞记录,涵盖越权访问、XSS、SQL注入等常见弱点。内容收录自2014年至今的公开安全公告,聚焦于会员目录、内容限制及注册登录模块的历史缺陷。读者可在此追踪该插件的补丁发布动态,分析各版本中的具体风险点,或检索与用户资料管理相关的安全事件。

厂商: ultimatemember

CVE ID 标题 CVSS 风险等级 Published
CVE-2026-93428 Ultimate Member <=2.13.1 敏感信息泄露漏洞 CWE-862 7.5 High 2026-10-03
CVE-2026-96270 Ultimate Member <=2.13.1 form_id参数未授权存储型XSS漏洞 CWE-79 7.2 High 2026-10-03
CVE-2026-18547 WordPress Ultimate Member 跨站脚本漏洞 CWE-79 6.4 Medium 2026-08-25
CVE-2026-15290 ultimatemember Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin SQL注入漏洞 CWE-89 7.5 High 2026-07-10
CVE-2026-8489 Ultimate Member 跨站脚本漏洞 CWE-79 6.4 Medium 2026-07-03
CVE-2026-7761 Ultimate Member Ultimate Member授权问题漏洞 CWE-862 8.8 High 2026-06-24
CVE-2025-15064 WordPress plugin Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 跨站脚本漏洞 CWE-79 6.4 Medium 2026-04-04
CVE-2026-4248 WordPress plugin Ultimate Member 授权问题漏洞 CWE-285 8.0 High 2026-03-27
CVE-2026-1404 WordPress plugin Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 跨站脚本漏洞 CWE-79 6.1 Medium 2026-02-18
CVE-2025-13220 WordPress plugin Ultimate Member 跨站脚本漏洞 CWE-79 6.4 Medium 2025-12-21
CVE-2025-12492 WordPress plugin Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 信息泄露漏洞 CWE-200 5.3 Medium 2025-12-20
CVE-2025-14081 WordPress plugin Ultimate Member 安全漏洞 CWE-863 4.3 Medium 2025-12-17
CVE-2025-13217 WordPress plugin Ultimate Member 跨站脚本漏洞 CWE-79 6.4 Medium 2025-12-17
CVE-2025-1702 WordPress plugin Ultimate Member SQL注入漏洞 CWE-89 7.5 High 2025-03-05
CVE-2024-12276 WordPress plugin Ultimate Member SQL注入漏洞 CWE-89 5.3 Medium 2025-02-21
CVE-2025-0308 WordPress plugin Ultimate Member SQL注入漏洞 CWE-89 7.5 High 2025-01-18
CVE-2025-0318 WordPress plugin Ultimate Member 信息泄露漏洞 CWE-200 5.3 Medium 2025-01-18
CVE-2024-10528 WordPress plugin Ultimate Member 安全漏洞 CWE-862 4.3 Medium 2024-11-21
CVE-2024-8519 WordPress plugin Ultimate Member 跨站脚本漏洞 CWE-79 6.4 Medium 2024-10-04
CVE-2024-8520 WordPress plugin Ultimate Member 安全漏洞 CWE-352 5.3 Medium 2024-10-04
CVE-2024-2765 WordPress Plugin Ultimate Member 跨站脚本漏洞 CWE-79 5.4 Medium 2024-05-02
CVE-2024-1071 WordPress Plugin Ultimate Member 安全漏洞 9.8 Critical 2024-03-13
CVE-2024-2123 WordPress Plugin Ultimate Member 安全漏洞 CWE-79 7.2 High 2024-03-13
CVE-2022-3383 WordPress plugin Ultimate Member 安全漏洞 CWE-94 7.2 High 2022-11-29
CVE-2022-3384 WordPress plugin Ultimate Member 安全漏洞 CWE-94 7.2 High 2022-11-29
CVE-2022-3361 WordPress plugin Ultimate Member 路径遍历漏洞 CWE-22 4.3 Medium 2022-11-29
CVE-2022-1208 WordPress plugin Ultimate Member 跨站脚本漏洞 CWE-79 6.4 Medium 2022-06-13
CVE-2022-1209 WordPress plugin Ultimate Member 输入验证错误漏洞 CWE-601 4.3 Medium 2022-05-10

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 产品累计公开 28 条 CVE 漏洞,本页提供按时间倒序的完整列表,包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。