Vendor

userelements

2 known vulnerabilities.

Products

Ultimate Member Widgets for Elementor – WordPress User Directory 1 Ultimate Member Widgets for Elementor 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2025-12778

Ultimate Member Widgets for Elementor <= 2.3 - Missing Authorization to Unauthenticated Information Exposure

The Ultimate Member Widgets for Elementor – WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_filter_users function in all versions up to, and including, 2.3. This makes …

userelements Ultimate Member Widgets for Elementor – WordPress User Directory Web / CMS

Nov 20, 2025