ultimatemember Vulnerabilities and Affected Products
Vulnerabilities associated with memberdirectory.
Products
Clear product- Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin25 vulnerabilities
- ForumWP – Forum & Discussion Board4 vulnerabilities
- ultimate_member2 vulnerabilities
- contentrestriction1 vulnerability
- JobBoardWP – Job Board Listings and Submissions1 vulnerability
- login1 vulnerability
- memberdirectory1 vulnerability
- membershipplugin1 vulnerability
- registration1 vulnerability
- user_profile1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-1071CRITICAL | WordPress Ultimate Member Plugin SQL InjectionThe Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in versions 2.1.3 to 2.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive i… | CVSS9.8v3.1 | EPSS89.4% | PoCs7 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |