VYPR

Ultimate Membership Pro

by WordPress

CVEs (1)

  • CVE-2020-36832CriOct 16, 2024
    risk 0.64cvss 9.8epss 0.01

    The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login as any user, including the site administrator with a default user ID of 1, via…