Ultimate Member Vulnerabilities and Affected Products
Vulnerabilities associated with ForumWP.
Products
Clear product- Ultimate Member8 vulnerabilities
- ForumWP2 vulnerabilities
- ultimate_member2 vulnerabilities
- Ultimate Member – User Profile, User Registration, Login & Membership Plugin1 vulnerability
- ultimate-member1 vulnerability
- User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-67474MEDIUM | WordPress ForumWP plugin <= 2.1.4 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Ultimate Member ForumWP forumwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ForumWP: from n/a through <= 2.1.4. CWE-862Dec 9, 2025 | CVSS4.3v3.1 | EPSS0.225% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-54367CRITICAL | WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through <= 2.1.0. CWE-502Dec 16, 2024 | CVSS9.8v3.1 | EPSS0.694% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |