Skip to content
OpenAdvisories

Vendor

Ultimate Member

51 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-96451 Public exploit

    WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.

  • High 7.6
    CVE-2026-62059 Public exploit

    WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1.