CVE-2018-0590

Published: May 14, 2018Modified: Nov 21, 2024

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the other users profiles via unspecified vectors.

Affected (1)

Products: Ultimatemember: User Profile & Membership

Ultimatemember

1 product

User Profile & Membership

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ultimatemember User Profile & Membership	Before 2.0.4

References (6)

http://jvn.jp/en/jp/JVN28804532/index.html

Source: vultures@jpcert.or.jp

Third Party Advisory

https://wordpress.org/plugins/ultimate-member/#developers

Source: vultures@jpcert.or.jp

Release Notes

https://wpvulndb.com/vulnerabilities/9608

Source: vultures@jpcert.or.jp

http://jvn.jp/en/jp/JVN28804532/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://wordpress.org/plugins/ultimate-member/#developers

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

https://wpvulndb.com/vulnerabilities/9608

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.