Description
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership version 1.2.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.2.6 or latest
References
Related Vulnerabilities
WordPress Plugin Zielke Specialized Catalog Arbitrary File Upload (3.0.7)
WordPress Plugin Podcast Subscribe Buttons Cross-Site Scripting (1.4.1)
WordPress Plugin Spam Free WordPress Security Bypass (1.9.2)
Play Framework Improper Input Validation Vulnerability (CVE-2015-2156)
TCExam Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2021-20113)