UM
Product
Ultimate Member
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 1Low 0
Watch
Add Ultimate Member to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-85680 | 8.8 | Sep 19 | Ultimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page Title Affected: before 2.13.1 |
| CVE-2026-19423 | 8.1 | Aug 28 | Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms Affected: 2.6.7 before 2.13.0 |
| CVE-2026-12251 | 8.1 | Jul 31 | Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field Affected: before 2.12.1 |
| CVE-2026-11766 | 8.0 | Jul 6 | Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields Affected: before 2.12.0 |
Showing 4