Log in Start free

Ultimate Member

Products

ProductCVEsExploitedLatest
Ultimate Member7–Oct 28, 2026
ForumWP2–Dec 9, 2025
Ultimate Member – User Profile, User Registration, Login & Membership Plugin1–May 24, 2021

Exploited and recent CVEs

  • CVE-2026-115968 Critical 9.8 WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-96539 Medium 5.6 WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability 0.1%
  • CVE-2026-96451 High 8.8 WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability 0.4%
  • CVE-2026-62059 High 7.6 WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerability 0.3%
  • CVE-2020-37169 Medium 5.5 WordPress Plugin ultimate-member 2.1.3 Local File Inclusion 0.2%
  • CVE-2025-67474 Medium 4.3 WordPress ForumWP plugin <= 2.1.4 - Broken Access Control vulnerability 0.2%
  • CVE-2025-47691 Medium 5.5 WordPress Ultimate Member plugin <= 2.10.3 - Arbitrary Function Call vulnerability 0.3%
  • CVE-2024-54367 Critical 9.8 WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability 0.7%
  • CVE-2023-31216 Medium 4.3 WordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2021-24306 Unrated Ultimate Member < 2.1.20 - Authenticated Reflected Cross-Site Scripting (XSS) 0.6%