CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2020-36170 | Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.1.13 | — | Medium 5.3 | < 2.1.13 | 2.1.13 | 2020-12-09 | — |
The Ultimate Member plugin versions prior to 2.1.13 contained improper handling of concealed timestamp fields within form elements, which could be exploited by attackers to manipulate form submissions.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.