WordPress CVEs

Description

The Ultimate Member plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Biography field featured on individual user profile pages due to insufficient input sanitization and output escaping that allows users to encode malicious web scripts with HTML encoding that is reflected back on the page. This affects versions up to, and including, 2.3.2. Please note this issue was only partially fixed in version 2.3.2.

Affected WordPress components

• Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin Plugin · ultimate-member
  Confirmed match Active
  Up to and including 2.3.2
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• ultimatemember Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin — Up to and including 2.3.2
• ultimatemember ultimate_member — Up to and including 2.3.2

References

• github.com https://github.com/H4de5-7/vulnerabilities/blob/main/Ultimate%20Member%20%3C%3D%202.3.1%20-%20Stored%20Cross-Site%20Scripting.md Exploit, Third Party Advisory
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2735896%40ultimate-member&new=2735896%40ultimate-member&sfp_email=&sfph_mail= Patch, Third Party Advisory
• www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/93cf6dce-892e-4106-bb37-b7952e5ea5a1?source=cve
• www.wordfence.com https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1208 Third Party Advisory
• nvd.nist.gov Official NVD record