agentprime: ultimate-memberEvery new CVE for ultimate-member.https://agentprime.io/CVE-2026-115968: WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-115968/https://agentprime.io/advisories/CVE-2026-115968/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 14:02:57 GMTCVEcriticalCVE-2026-96539: WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerabilityhttps://agentprime.io/advisories/CVE-2026-96539/https://agentprime.io/advisories/CVE-2026-96539/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 10:00:16 GMTCVECVE-2026-96451: WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerabilityhttps://agentprime.io/advisories/CVE-2026-96451/https://agentprime.io/advisories/CVE-2026-96451/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 15:08:13 GMTCVECVE-2026-62059: WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62059/https://agentprime.io/advisories/CVE-2026-62059/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 12:39:49 GMTCVECVE-2026-85680: Ultimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page Titlehttps://agentprime.io/advisories/CVE-2026-85680/https://agentprime.io/advisories/CVE-2026-85680/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Sep 2026 06:00:15 GMTCVECVE-2026-19251: Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile Activityhttps://agentprime.io/advisories/CVE-2026-19251/https://agentprime.io/advisories/CVE-2026-19251/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 06:00:17 GMTCVECVE-2026-19423: Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Formshttps://agentprime.io/advisories/CVE-2026-19423/https://agentprime.io/advisories/CVE-2026-19423/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 06:00:16 GMTCVECVE-2026-12251: Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Fieldhttps://agentprime.io/advisories/CVE-2026-12251/https://agentprime.io/advisories/CVE-2026-12251/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 06:00:10 GMTCVECVE-2026-11766: Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fieldshttps://agentprime.io/advisories/CVE-2026-11766/https://agentprime.io/advisories/CVE-2026-11766/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 06:00:01 GMTCVECVE-2025-47691: WordPress Ultimate Member plugin <= 2.10.3 - Arbitrary Function Call vulnerabilityhttps://agentprime.io/advisories/CVE-2025-47691/https://agentprime.io/advisories/CVE-2025-47691/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 May 2025 14:20:57 GMTCVECVE-2023-31216: WordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)https://agentprime.io/advisories/CVE-2023-31216/https://agentprime.io/advisories/CVE-2023-31216/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Jul 2023 13:50:07 GMTCVECVE-2023-3460: Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalationhttps://agentprime.io/advisories/CVE-2023-3460/https://agentprime.io/advisories/CVE-2023-3460/Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Jul 2023 07:23:28 GMTCVECVE-2018-0590: Ultimate Member: Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated…https://agentprime.io/advisories/CVE-2018-0590/https://agentprime.io/advisories/CVE-2018-0590/Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 May 2018 13:00:00 GMTCVECVE-2018-0589: Ultimate Member: Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated…https://agentprime.io/advisories/CVE-2018-0589/https://agentprime.io/advisories/CVE-2018-0589/Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 May 2018 13:00:00 GMTCVECVE-2018-0588: Ultimate Member: Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to…https://agentprime.io/advisories/CVE-2018-0588/https://agentprime.io/advisories/CVE-2018-0588/Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 May 2018 13:00:00 GMTCVECVE-2018-0587: Ultimate Member: Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4…https://agentprime.io/advisories/CVE-2018-0587/https://agentprime.io/advisories/CVE-2018-0587/Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 May 2018 13:00:00 GMTCVECVE-2018-0586: Ultimate Member: Directory traversal vulnerability in the shortcodes function of Ultimate Member plugin…https://agentprime.io/advisories/CVE-2018-0586/https://agentprime.io/advisories/CVE-2018-0586/Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 May 2018 13:00:00 GMTCVECVE-2018-0585: Ultimate Member: Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for…https://agentprime.io/advisories/CVE-2018-0585/https://agentprime.io/advisories/CVE-2018-0585/Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 May 2018 13:00:00 GMTCVE