Description
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership is prone to a privilege escalation vulnerability. Exploiting this issue may allow attackers to bypass the expected capabilities check and perform otherwise restricted actions; other attacks are also possible. WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership version 2.0.50 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.0.51 or latest
References
Related Vulnerabilities
WordPress Plugin OAuth client Single Sign On for WordPress (OAuth 2.0 SSO) Security Bypass (3.0.3)
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2017-5659)
WordPress Plugin HubSpot All-In-One Marketing-Forms, Popups, Live Chat Cross-Site Scripting (7.5.5)
Apache Tomcat Resource Management Errors Vulnerability (CVE-2011-0534)