UM
Vendor
Ultimate Member
8
CVEs
0
On KEV
4
New 30D
Products
UL9.8
ultimate-member
Ultimate Member
6 CVEs0 on KEV4 new
FO9.8
ForumWP
Ultimate Member
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115968 New | UM Ultimate Member Ultimate Member | 9.8 | Oct 28 | WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability |
| CVE-2026-96539 | UM Ultimate Member Ultimate Member | 5.6 | Oct 9 | WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability |
| CVE-2026-96451 | UM Ultimate Member Ultimate Member | 8.8 | Oct 3 | WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability |
| CVE-2026-62059 | UM Ultimate Member Ultimate Member | 7.6 | Oct 1 | WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerability |
| CVE-2020-37169 | UL ultimate-member Ultimate Member | 5.5 | May 13 | WordPress Plugin ultimate-member 2.1.3 Local File Inclusion |
| CVE-2025-67474 | FO ForumWP Ultimate Member | 4.3 | Dec 9 | WordPress ForumWP plugin <= 2.1.4 - Broken Access Control vulnerability |
| CVE-2025-47691 | UM Ultimate Member Ultimate Member | 5.5 | May 7 | WordPress Ultimate Member plugin <= 2.10.3 - Arbitrary Function Call vulnerability |
| CVE-2024-54367 | FO ForumWP Ultimate Member | 9.8 | Dec 16 | WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability |