VendorsUltimate Memberforumwpall versions
Vulnerabilities

Ultimate Member ForumWP – Forum & Discussion Board Plugin

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2024-54367
WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability
Published 2024-12-16 · Modified
9.8EPSS 0.007
CVE-2024-8428
ForumWP – Forum & Discussion Board Plugin <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Published 2024-09-06 · Modified
8.8EPSS 0.005
CVE-2024-10879
ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting
Published 2024-12-06 · Modified
6.1EPSS 0.004
CVE-2024-11204
ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting via url Parameter
Published 2024-12-06 · Modified
6.1EPSS 0.003