Medium · 5.6 CVE-2026-96539 EUVD-2026-95590GHSA-vf6m-m5g4-4q6v

WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

Published Oct 9, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Vendor: Ultimate Member Product: Ultimate Member

Description

Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.

Affected products

Vendor	Product	Affected	Fixed
Ultimate Member	Ultimate Member	≤ 2.13.1	—

References

https://patchstack.com/database/wordpress/plugin/ultimate-member/vulnerability/wordpress-ultimate-member-plugin-2-13-1-privilege-escalation-vulnerability-2?_s_id=cve vdb-entry