CVE · Medium

CVE-2016-10872 — Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 1.3.40

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2016-10872 Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 1.3.40 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 1.3.40 1.3.40 2016-04-06

CVE-2016-10872

The Ultimate Member WordPress plugin before version 1.3.40 contained a cross-site scripting vulnerability that could be exploited to inject malicious scripts into web pages viewed by users of the plugin.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.