Skip to content
OpenAdvisories

Product · azzaroco

Ultimate Membership Pro

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-25357

    WordPress Ultimate Membership Pro plugin <= 13.7 - Account Takeover vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro allows Authentication Abuse.This issue affects Ultimate Membership Pro: from n/a through <= 13.7.

    azzaroco Ultimate Membership Pro
  • High 7.1
    CVE-2024-43241

    WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.

    azzaroco Ultimate Membership Pro