← العودة للجدول
CVE-2026-96270
CVE-2026-96270 — The Ultimate Member – User Profile, Registration, Login, Member Directory, Con
📅 2026-10-03
🟠 High 🔥 No NVD Vulnerability WordPress CVSS 7.2

📋 الوصف الكامل

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_id' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-96270

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v2.13.1

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←