Description The ultimate-member plugin before 2.0.54 for WordPress has XSS. Remediation References CVE-2019-14945 Related Vulnerabilities Joomla! Core 2.5.x Information Disclosure (2.5.0 - 2.5.3) MySQL CVE-2022-21483 Vulnerability (CVE-2022-21483) WordPress Plugin IP Geo Block Security Bypass (2.2.2) WordPress Plugin YITH WooCommerce Gift Cards Security Bypass (1.3.7) OpenSSL Out-of-bounds Read Vulnerability (CVE-2016-2180) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2019-14945