Users Ultra Membership
by Usersultra
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2015-9402 | Hig | 0.57 | 8.8 | 0.02 | Sep 20, 2019 | The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload. | ||
| CVE-2015-9395 | Hig | 0.57 | 8.8 | 0.02 | Sep 20, 2019 | The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action. | ||
| CVE-2015-9394 | Hig | 0.57 | 8.8 | 0.01 | Sep 20, 2019 | The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php. | ||
| CVE-2015-9393 | Med | 0.35 | 5.4 | 0.01 | Sep 20, 2019 | The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter. | ||
| CVE-2015-9392 | Med | 0.35 | 5.4 | 0.01 | Sep 20, 2019 | The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter. |
- risk 0.57cvss 8.8epss 0.02
The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.
- risk 0.57cvss 8.8epss 0.02
The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.
- risk 0.57cvss 8.8epss 0.01
The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.
- risk 0.35cvss 5.4epss 0.01
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.
- risk 0.35cvss 5.4epss 0.01
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.