Login Request a demo
UM
Product
Ultimate Member
by · last CVE Sep 19, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 4Medium 1Low 0
Severity
All severities6Critical1High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ultimate Member to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-3460
9.8
72%
Jul 4
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
Affected: before 2.6.7
CVE-2026-85680
8.8
1%
Sep 19
Ultimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page Title
Affected: before 2.13.1
CVE-2026-19423
8.1
0%
Aug 28
Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms
Affected: 2.6.7 before 2.13.0
CVE-2026-12251
8.1
0%
Jul 31
Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field
Affected: before 2.12.1
CVE-2026-11766
8.0
0%
Jul 6
Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields
Affected: before 2.12.0
CVE-2026-19251
5.3
0%
Sep 2
Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile Activity
Affected: before 2.13.0
Showing 6