Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Plugin de WordPress

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

86 expedientes en el radar

Comprueba tu versión de Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin Sólo las que se están explotando

[■] Registro

Vulnerabilidades (86)

  1. 5,3 Media

    CVE-2024-8520: falsificación de peticiones (CSRF) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2024-8520

    T−772d 3 oct. 2024

  2. 6,4 Media

    CVE-2024-8519: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2024-8519

    T−772d 3 oct. 2024

  3. 5,4 Media

    CVE-2024-2765: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2024-2765

    T−948d 10 abr. 2024

  4. 9,8 Crít.

    CVE-2024-1071: inyección SQL en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2024-1071

    T−976d 13 mar. 2024

  5. 7,2 Alta

    CVE-2024-2123: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2024-2123

    T−981d 8 mar. 2024

  6. 4,3 Media

    Falsificación de peticiones (CSRF) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−1194d 8 ago. 2023

  7. 9,8 Crít.

    CVE-2023-3460: vulnerabilidad en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2023-3460

    T−1229d 4 jul. 2023

  8. 4,3 Media

    CVE-2023-31216: falsificación de peticiones (CSRF) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2023-31216

    T−1264d 30 may. 2023

  9. 7,2 Alta

    CVE-2022-3383: inyección de código en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2022-3383

    T−1478d 28 oct. 2022

  10. 4,3 Media

    CVE-2022-3361: recorrido de rutas (path traversal) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2022-3361

    T−1478d 28 oct. 2022

  11. 4,7 Media

    CVE-2022-2445: recorrido de rutas (path traversal) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2022-2445

    T−1478d 28 oct. 2022

  12. 7,2 Alta

    CVE-2022-3384: inyección de código en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2022-3384

    T−1478d 28 oct. 2022

  13. 5,4 Media

    Cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−1583d 15 jul. 2022

  14. 7,5 Alta

    Exposición de información sensible en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−1584d 14 jul. 2022

  15. 4,3 Media

    CVE-2022-1209: redirección abierta en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2022-1209

    T−1660d 29 abr. 2022

  16. 6,4 Media

    CVE-2022-1208: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2022-1208

    T−1699d 21 mar. 2022

  17. 6,1 Media

    CVE-2021-24306: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2021-24306

    T−2017d 7 may. 2021

  18. 9,8 Crít.

    CVE-2020-36157: gestión incorrecta de privilegios en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2020-36157

    T−2140d 4 ene. 2021

  19. 9,8 Crít.

    CVE-2020-36155: gestión incorrecta de privilegios en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2020-36155

    T−2140d 4 ene. 2021

  20. 6,5 Media

    CVE-2020-36170: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2020-36170

    T−2166d 9 dic. 2020

  21. 9,9 Crít.

    CVE-2020-36156: gestión incorrecta de privilegios en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2020-36156

    T−2196d 9 nov. 2020

  22. 6,1 Media

    Redirección abierta en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−2305d 23 jul. 2020

  23. 5,3 Media

    CVE-2020-6859: gestión incorrecta de privilegios en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2020-6859

    T−2497d 13 ene. 2020

  24. 6,1 Media

    CVE-2018-20965: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-20965

    T−2651d 12 ago. 2019

  25. 4,3 Media

    CVE-2018-0586: recorrido de rutas (path traversal) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-0586

    T−2651d 12 ago. 2019

  26. 6,1 Media

    CVE-2018-0585: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-0585

    T−2651d 12 ago. 2019

  27. 6,4 Media

    CVE-2019-14945: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2019-14945

    T−2672d 22 jul. 2019

  28. 5,4 Media

    CVE-2019-14947: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2019-14947

    T−2700d 24 jun. 2019

  29. 6,1 Media

    CVE-2019-14946: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2019-14946

    T−2700d 24 jun. 2019

  30. 4,3 Media

    CVE-2019-10271: falta de autorización en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2019-10271

    T−2709d 15 jun. 2019