Unscored CVE-2018-0590 EUVD-2018-1400GHSA-36j5-qc55-8r3p

Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify th…

Published May 14, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Ultimate Member Product: Ultimate Member

Description

Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the other users profiles via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Ultimate Member	Ultimate Member	prior to version 2.0.4	—

References

JVN#28804532 third-party-advisory
https://wordpress.org/plugins/ultimate-member/#developers
https://wpvulndb.com/vulnerabilities/9608