CVE-2022-3361

Ultimate Member versions up to 2.5.0 contain a directory traversal vulnerability in the shortcode template attribute that allows insufficient validation of user-supplied input. Administrators can exploit this flaw by using path traversal sequences to access files outside the intended directory scope, potentially leading to remote code execution if a PHP file has been uploaded to the server. Non-administrative users can only exploit this vulnerability if they have been granted access to the WordPress admin dashboard, making the attack surface dependent on user permissions.

Based on public CVE data (MITRE/NVD).