| Package | Affected versions | Patched versions |
|---|---|---|
| user profile & membership | < 2.0.4 | 2.0.4 |
Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the other users profiles via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free