CVE-2018-0586

概要

参考情報

• jvn.jp/en/jp/JVN28804532/index.html · Third Party Advisory
• wordpress.org/plugins/ultimate-member · Release Notes
• wpvulndb.com/vulnerabilities/9608

user profile & membership のその他の脆弱性

• CVE-2018-0590中 4.3Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the…
• CVE-2018-0589中 4.3Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to add a new …
• CVE-2018-0588高 7.5Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attacker…
• CVE-2018-0587中 4.3Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to u…
• CVE-2018-10234中 4.8Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Cust…