Unknown Ultimate Member

• CVE-2026-85680 High 8.8 Ultimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page Title 0.5%
• CVE-2026-19251 Medium 5.3 Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile Activity 0.3%
• CVE-2026-19423 High 8.1 Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms 0.4%
• CVE-2026-12251 High 8.1 Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field 0.4%
• CVE-2026-11766 High 8.0 Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields 0.4%
• CVE-2023-3460 Unrated Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation 72.3%