Vulnerabilities / Ultimate Member
Ultimate Member vulnerabilities
Advisories WPSec published for Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin. Other sources may list more. Its attack surface: Ultimate Member on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-01 | WPSEC-2026-0010 | Ultimate Member <= 2.13.1 - Unauthenticated Sensitive Information Exposure via Private Profile Fields | Medium 5.3 | 2.14.0 |
| 2026-10-01 | WPSEC-2026-0009 | Ultimate Member <= 2.13.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover | High 7.5 | 2.14.0 |
| 2026-10-01 | WPSEC-2026-0008 | Ultimate Member <= 2.13.1 - Authenticated (Administrator+) SQL Injection via Directory Search-Field Identifiers | Medium 4.9 | 2.14.0 |
License: CC BY 4.0