CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-2123 | Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.8.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.8.4 | 2.8.4 | 2024-03-08 | — |
The Ultimate Member plugin before version 2.8.4 contains a cross-site scripting vulnerability that could enable an attacker to inject harmful scripts into your website, potentially executing redirects, advertisements, or other malicious HTML when visitors access the site. The flaw was discovered by stealthcopter and has been resolved in version 2.8.4 and later.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.