Ultimate Member vulnerabilities

CVEs per yearBy the year they were published

1. 20186
2. 20211
3. 20231
4. 20241
5. 20252
6. 20264
7. 20261

Newest CVEs

• CVE-2026-115968

  WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability

  Ultimate Member · Ultimate Member

  Critical9.8
• CVE-2026-96539

  WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

  Ultimate Member · Ultimate Member

  Medium5.6
• CVE-2026-96451

  WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

  Ultimate Member · Ultimate Member

  High8.8
• CVE-2026-62059

  WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerability

  Ultimate Member · Ultimate Member

  High7.6
• CVE-2020-37169

  WordPress Plugin ultimate-member 2.1.3 Local File Inclusion

  Ultimate Member · ultimate-member

  Medium6.8
• CVE-2025-67474

  WordPress ForumWP plugin <= 2.1.4 - Broken Access Control vulnerability

  Ultimate Member · ForumWP

  Medium4.3
• CVE-2025-47691

  WordPress Ultimate Member plugin <= 2.10.3 - Arbitrary Function Call vulnerability

  Ultimate Member · Ultimate Member

  Medium5.5
• CVE-2024-54367

  WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability

  Ultimate Member · ForumWP

  Critical9.8
• CVE-2023-31216

  WordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

  Ultimate Member · Ultimate Member

  Medium4.3
• CVE-2021-24306

  Ultimate Member < 2.1.20 - Authenticated Reflected Cross-Site Scripting (XSS)

  Ultimate Member · Ultimate Member – User Profile, User Registration, Login & Membership Plugin

  Medium5.4