Unscored CVE-2018-0588 EUVD-2018-1398GHSA-m5gh-j9fw-88fp

Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attacke…

Published May 14, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Ultimate Member Product: Ultimate Member

Description

Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to read arbitrary files via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Ultimate Member	Ultimate Member	prior to version 2.0.4	—

References

JVN#28804532 third-party-advisory
https://wordpress.org/plugins/ultimate-member/#developers
https://wpvulndb.com/vulnerabilities/9608