azzaroco Ultimate Membership Pro

• CVE-2026-25357 High 8.1 WordPress Ultimate Membership Pro plugin <= 13.7 - Account Takeover vulnerability 0.4%
• CVE-2024-43242 Critical 9.0 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability 0.5%
• CVE-2024-43240 Critical 9.4 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability 0.5%
• CVE-2024-43241 High 7.1 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%