Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 90
Reset filtersUltimate Member <= 2.3.2 - Stored Cross-Site Scripting
Ultimate Member <= 2.1.19 - Reflected Cross-Site Scripting
Ultimate Member <= 2.1.12 - Cross-Site Scripting
Ultimate Member <= 2.1.11 - Authenticated Privilege Escalation via Profile Update
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Meta
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Roles
Ultimate Member <= 2.1.6 - Open Redirect
Ultimate Member <= 2.1.2 - Insecure Direct Object Reference
Ultimate Member <= 2.0.3 - Cross Site Scripting
Ultimate Member <= 2.0.3 - Directory Traversal
Ultimate Member <= 1.3.88 - Cross Site Scripting
Ultimate Member <= 2.0.53 - Cross-Site Scripting
Ultimate Member <= 2.0.51 - Cross-Site Request Forgery and Stored Cross-Site Scripting
Ultimate Member <= 2.0.51 - Cross-Site Request Forgery and Stored Cross-Site Scripting
Ultimate Member <= 2.0.39 - Privilege Escalation
Ultimate Member <= 2.0.39 - Unauthorized Profile Modification
Ultimate Member <= 2.0.45 - Low-Privileged Stored Cross-Site Scripting
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.0.45 - Arbitrary File Deletion/Read
Ultimate Member <= 2.0.45 - Admin+ Stored Cross-Site Scripting
Ultimate Member <= 2.0.39 - Cross-Site Request Forgery
Ultimate Member <= 2.0.32 - Cross-Site Request Forgery
Ultimate Member <= 2.0.27 - Multiple Cross-Site Scripting vulnerabilities
Ultimate Member <= 2.0.21 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.