Skip to content
Threat Feed
Subscribe

Product

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

1 brief RSS
high advisory

Authorization Bypass in Ultimate Member Plugin for WordPress

An authorization bypass vulnerability in the Ultimate Member WordPress plugin allows unauthenticated attackers to exfiltrate private profile data via the wp_ajax_nopriv_um_get_members endpoint.

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
1r 1t 1c