CVE-2018-13136

The Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-07-04

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Ultimate Member (Ultimatemember)

References

• https://github.com/ultimatemember/ultimatemember/issues/456
• https://github.com/ultimatemember/ultimatemember/releases/tag/2.0.18
• https://wpvulndb.com/vulnerabilities/9708