Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-96451 2 Ultimatemember, Wordpress-extensions 2 Ultimate Member, Ultimate Member 2026-10-05 8.8 High
Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.
CVE-2026-62059 2 Ultimatemember, Wordpress-extensions 2 Ultimate Member, Ultimate Member 2026-10-01 7.6 High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1.