CVE-2018-0588

Description

References

• jvn.jp/en/jp/JVN28804532/index.html · Third Party Advisory
• wordpress.org/plugins/ultimate-member · Release Notes
• wpvulndb.com/vulnerabilities/9608

Weitere Schwachstellen in user profile & membership

• CVE-2018-0590MITTEL 4.3Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the…
• CVE-2018-0589MITTEL 4.3Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to add a new …
• CVE-2018-0587MITTEL 4.3Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to u…
• CVE-2018-0586MITTEL 4.3Directory traversal vulnerability in the shortcodes function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote au…
• CVE-2018-10234MITTEL 4.8Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Cust…