CVE Database /
CVE-2018-10233
CVE · High
CVE-2018-10233 — Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.0.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2018-10233
|
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.0.7 |
Cross-Site Request Forgery (CSRF) |
High
8.8
|
< 2.0.7
|
2.0.7 |
2018-04-23 |
—
|
CVE-2018-10233
The Ultimate Member plugin before version 2.0.7 lacks protective measures against cross-site request forgery (CSRF) attacks across its entire codebase. This vulnerability exists as a systemic issue rather than being isolated to specific features, making it possible for attackers to perform unwanted actions by tricking users into visiting malicious sites while authenticated to the plugin.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings