Description

Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2018-0585

Related Vulnerabilities

Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-47021)

Sqlite Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2021-45346)

WordPress Plugin Booking Calendar Cross-Site Scripting (7.1)

WordPress Plugin jRSS Widget Server-Side Request Forgery (1.2)

Oracle Database Server CVE-2013-5771 Vulnerability (CVE-2013-5771)

Severity

Medium

Classification

CVE-2018-0585 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities