CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2019-14945 | Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.0.54 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.0.54 | 2.0.54 | 2019-07-22 | — |
The Ultimate Member plugin for WordPress contains a cross-site scripting vulnerability affecting versions up to and including 2.0.53. This flaw allows malicious actors to inject and execute arbitrary scripts in users' browsers through the plugin's functionality. The vulnerability was remedied in version 2.0.54 and later.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.