Description The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms. Remediation References CVE-2020-36170 Related Vulnerabilities WordPress Plugin Metronet Tag Manager Cross-Site Request Forgery (1.2.7) PHP Out-of-bounds Write Vulnerability (CVE-2021-21703) WordPress Plugin YOP Poll Cross-Site Scripting (6.3.2) WordPress Plugin PayPal Digital Downloads Cross-Site Request Forgery (1.4) WebLogic CVE-2019-2890 Vulnerability (CVE-2019-2890) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Tags Missing Update Known Vulnerabilities CVE-2020-36170