Unscored CVE-2018-0587 EUVD-2018-1397GHSA-m2cc-xh6j-cr9r

Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to …

Published May 14, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Ultimate Member Product: Ultimate Member

Description

Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to upload arbitrary image files via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Ultimate Member	Ultimate Member	prior to version 2.0.4	—

References

JVN#28804532 third-party-advisory
https://wordpress.org/plugins/ultimate-member/#developers
https://wpvulndb.com/vulnerabilities/9608