← العودة للجدول
CVE-2026-93428
CVE-2026-93428 — The Ultimate Member – User Profile, Registration, Login, Member Directory, Con
📅 2026-10-03
🟠 High 🔥 No NVD Vulnerability WordPress CVSS 7.5

📋 الوصف الكامل

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.1 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to view privacy-restricte

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-93428

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v2.13.1

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←