Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Ultimate Member — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in Ultimate Member, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for the vendor Product: Ultimate Member. The section collects security defects associated with this software, covering reported issues from 2014 through the current date. You can use this index to track the vendor’s published advisories, analyze the frequency of a specific weakness class, or review the product’s historical vulnerability records. The dataset includes cross-references to official security bulletins and standardized weakness categories. Readers can filter entries by severity, impact scope, and affected version ranges. This aggregation serves as a reference for audit purposes, allowing teams to identify recurring patterns in the product’s security posture. No individual CVE identifiers are listed directly here; instead, the focus remains on categorizing and contextualizing the underlying weaknesses. The information supports compliance workflows and risk assessment for organizations relying on this software.

Vendor: Ultimate Member

CVE ID Title CVSS Severity Published
CVE-2026-96539 WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability CWE-266 5.6 Medium 2026-10-09
CVE-2026-96451 WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability CWE-639 8.8 High 2026-10-03
CVE-2026-62059 WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerability CWE-89 7.6 High 2026-10-01
CVE-2026-85680 Ultimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page Title - - 2026-09-19
CVE-2026-19251 Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile Activity - - 2026-09-02
CVE-2026-19423 Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms - - 2026-08-28
CVE-2026-12251 Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field - - 2026-07-31
CVE-2026-11766 Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields - - 2026-07-06
CVE-2025-47691 WordPress Ultimate Member plugin <= 2.10.3 - Arbitrary Function Call vulnerability CWE-94 5.5 Medium 2025-05-07
CVE-2023-31216 WordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium 2023-07-17
CVE-2023-3460 Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation 9.8 - 2023-07-04
CVE-2018-0585 WordPress Ultimate Member插件跨站脚本漏洞 5.4 - 2018-05-14
CVE-2018-0590 WordPress Ultimate Member插件安全漏洞 6.5 - 2018-05-14
CVE-2018-0589 WordPress Ultimate Member插件安全漏洞 4.3 - 2018-05-14
CVE-2018-0588 WordPress Ultimate Member插件路径遍历漏洞 5.3 - 2018-05-14
CVE-2018-0587 WordPress Ultimate Member插件安全漏洞 4.3 - 2018-05-14
CVE-2018-0586 WordPress Ultimate Member插件路径遍历漏洞 4.3 - 2018-05-14

All 17 known CVE vulnerabilities affecting Ultimate Member with full Chinese analysis, references, and POCs where available.