Skip to content
OpenAdvisories

Product · Ultimate Member

Ultimate Member

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.6
    CVE-2026-96539

    WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.

    Ultimate Member Ultimate Member
  • Medium 5.5
    CVE-2020-37169

    WordPress Plugin ultimate-member 2.1.3 Local File Inclusion

    WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipulating the pack parameter in class-admin-upgrade.php. Attackers can send POST requests with malicious …

    Ultimate Member Ultimate Member Web / CMS
  • Medium 5.5
    CVE-2025-47691

    WordPress Ultimate Member plugin <= 2.10.3 - Arbitrary Function Call vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Code Injection.This issue affects Ultimate Member: from n/a through <= 2.10.3.

    Ultimate Member Ultimate Member
  • Medium 4.3
    CVE-2023-31216

    WordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Ultimate Member plugin <= 2.6.0 versions.

    Ultimate Member Ultimate Member