Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Plugin de WordPress

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

86 expedientes en el radar

Comprueba tu versión de Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin Sólo las que se están explotando

[■] Registro

Vulnerabilidades (86)

  1. 8,8 Alta

    CVE-2019-10270: gestión incorrecta de privilegios en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2019-10270

    T−2709d 15 jun. 2019

  2. 5,5 Media

    Cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−2742d 13 may. 2019

  3. 9,4 Crít.

    Recorrido de rutas (path traversal) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−2742d 13 may. 2019

  4. 6,4 Media

    Cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−2742d 13 may. 2019

  5. 8,8 Alta

    CVE-2019-10673: falsificación de peticiones (CSRF) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2019-10673

    T−2784d 1 abr. 2019

  6. 6,1 Media

    Falsificación de peticiones (CSRF) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−2909d 27 nov. 2018

  7. 6,1 Media

    CVE-2018-17866: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-17866

    T−2961d 6 oct. 2018

  8. 6,1 Media

    Cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−3019d 9 ago. 2018

  9. 8,8 Alta

    Subida de ficheros peligrosos en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−3020d 8 ago. 2018

  10. 6,1 Media

    CVE-2018-13136: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-13136

    T−3056d 3 jul. 2018

  11. 4,3 Media

    CVE-2018-0589: control de acceso inadecuado en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-0589

    T−3106d 14 may. 2018

  12. 4,3 Media

    CVE-2018-0588: recorrido de rutas (path traversal) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-0588

    T−3110d 10 may. 2018

  13. 4,3 Media

    CVE-2018-0590: acceso a datos de otros usuarios (IDOR) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-0590

    T−3110d 10 may. 2018

  14. 4,3 Media

    CVE-2018-0587: subida de ficheros peligrosos en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-0587

    T−3110d 10 may. 2018

  15. 5,5 Media

    CVE-2018-10234: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-10234

    T−3127d 23 abr. 2018

  16. 8,8 Alta

    CVE-2018-10233: falsificación de peticiones (CSRF) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-10233

    T−3127d 23 abr. 2018

  17. 6,1 Media

    CVE-2018-6944: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-6944

    T−3195d 14 feb. 2018

  18. 6,1 Media

    CVE-2018-6943: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2018-6943

    T−3195d 14 feb. 2018

  19. 9,8 Crít.

    Falta de autorización en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−3498d 17 abr. 2017

  20. 9,8 Crít.

    Falta de autorización en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−3630d 6 dic. 2016

  21. 9,1 Crít.

    Inclusión de ficheros en PHP en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−3779d 10 jul. 2016

  22. 6,1 Media

    CVE-2016-10872: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2016-10872

    T−3874d 6 abr. 2016

  23. 6,1 Media

    CVE-2015-8354: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2015-8354

    T−4000d 2 dic. 2015

  24. 6,1 Media

    CVE-2015-9304: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2015-9304

    T−4104d 20 ago. 2015

  25. 7,1 Alta

    Cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−4167d 18 jun. 2015

  26. 9,8 Crít.

    Falta de autorización en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    T−4267d 10 mar. 2015