Unknown Ultimate Member vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20265

Newest CVEs

• CVE-2026-85680

  Ultimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page Title

  Unknown · Ultimate Member

  High8.8
• CVE-2026-19251

  Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile Activity

  Unknown · Ultimate Member

  Medium5.3
• CVE-2026-19423

  Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms

  Unknown · Ultimate Member

  High8.1
• CVE-2026-12251

  Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field

  Unknown · Ultimate Member

  High8.1
• CVE-2026-11766

  Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields

  Unknown · Ultimate Member

  High8.0
• CVE-2023-3460

  Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation

  Unknown · Ultimate Member

  Critical9.8