Users Ultra Membership CVEs and Security Vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2015-9402

The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Usersultra

Products

Users Ultra Membership

CVE-2015-9395

The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed

Vendors

Usersultra

Products

Users Ultra Membership

CVE-2015-9394

The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Usersultra

Products

Users Ultra Membership

CVE-2015-9393

The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Usersultra

Products

Users Ultra Membership

CVE-2015-9392

The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.

CVSS 3.1 · 5.4 Medium EPSS 1.2% KEV · Not listed

Vendors

Usersultra

Products

Users Ultra Membership

Page 1 of 1.