Ultimate Member WordPress Plugin Vulnerable to Privilege Escalation

Read the original article: Ultimate Member WordPress Plugin Vulnerable to Privilege Escalation


Ultimate Member is a free WordPress plugin for managing user registration and profiles with features to help create an online community. On October 23rd, the Threat Intelligence team at Wordfence disclosed multiple vulnerabilities with the plugin that made it possible to escalate privilege and take over a WordPress site. During user registration, a lack of […]

The post Ultimate Member WordPress Plugin Vulnerable to Privilege Escalation appeared first on Binary Defense.


Read the original article: Ultimate Member WordPress Plugin Vulnerable to Privilege Escalation