Skip to content
Threat Feed
Subscribe

Product

Ultimate Member (<= 2.13.1)

1 brief RSS
medium advisory

Stored XSS in Ultimate Member Plugin for WordPress

The Ultimate Member WordPress plugin (<= 2.13.1) contains a stored XSS vulnerability in the form_id parameter, allowing unauthenticated attackers to execute arbitrary scripts in the administrator dashboard.

Ultimate Member wordpress xss web-application-vulnerability
1r 1t 1c