Description
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently modify arbitrary user_meta data. WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership version 1.3.52 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.53 or latest
References
Related Vulnerabilities
WordPress Plugin OneLogin SAML SSO Security Bypass (2.2.0)
Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-11585)
WordPress Plugin Avenir-soft Direct Download Multiple Vulnerabilities (1.0)
WordPress Plugin WP Statistics Cross-Site Scripting (9.5.1)
XWiki Incorrect Authorization Vulnerability (CVE-2021-32620)