Sploitus

27 exploited vulnerabilities in Ultimate Member

Vulnerabilities with publicly known exploits

Vendors
WordPress, Ultimate Member
With known exploits
27
Affected Ultimatemember Ultimate Member versions
< 2.8.3, 2.1.12, 2.6.7, 2.0.40, 2.5.0, 2.3.2, 2.0, 2.0.28, 2.0.52, 2.0.54, 2.6.0, 2.3.1, 1.3.28
Affected Ultimatemember versions
= 2.0

Vulnerabilities with exploits

Highest CVSS first — 11 of these already have exploit code on Sploitus

CVE-2024-1071 15 exploits
CVSS 9.8 CRITICAL 2024-01-30FIX AVAILABLE
CVE-2020-36157 1 exploit
CVSS 10.0 CRITICAL 2021-01-04FIX AVAILABLE
CVE-2020-36155 1 exploit
CVSS 10.0 CRITICAL 2021-01-04FIX AVAILABLE
CVE-2020-36156 1 exploit
CVSS 9.9 CRITICAL 2021-01-04FIX AVAILABLE
CVE-2023-3460 21 exploits
CVSS 9.8 CRITICAL 2023-07-01FIX AVAILABLE
CVE-2019-10673 2 exploits
CVSS 9.3 HIGH 2019-04-03FIX AVAILABLE
CVE-2019-10270
CVSS 8.8 HIGH 2019-06-21FIX AVAILABLE
CVE-2026-19423
CVSS 8.1 HIGH 2026-08-28FIX AVAILABLE
CVE-2026-12251
CVSS 8.1 HIGH 2026-07-31FIX AVAILABLE
CVE-2026-11766
CVSS 8.0 HIGH 2026-07-06FIX AVAILABLE
CVE-2026-4248
CVSS 8.0 HIGH 2026-03-27FIX AVAILABLE
CVE-2022-3384
CVSS 7.2 HIGH 2022-11-29
CVE-2022-3383
CVSS 7.2 HIGH 2022-11-29FIX AVAILABLE
CVE-2025-15064
CVSS 6.4 MEDIUM 2026-04-04FIX AVAILABLE
CVE-2022-1208
CVSS 6.4 MEDIUM 2022-06-13FIX AVAILABLE
CVE-2018-6944 1 exploit
CVSS 6.1 MEDIUM 2018-02-16
CVE-2018-6943 1 exploit
CVSS 6.1 MEDIUM 2018-02-16
CVE-2018-17866
CVSS 6.1 MEDIUM 2018-10-09FIX AVAILABLE
CVE-2020-37169
CVSS 6.8 MEDIUM 2026-05-13FIX AVAILABLE
CVE-2019-14947 1 exploit
CVSS 5.4 MEDIUM 2019-08-12FIX AVAILABLE
CVE-2019-14946 1 exploit
CVSS 5.4 MEDIUM 2019-08-12FIX AVAILABLE
CVE-2019-14945
CVSS 5.4 MEDIUM 2019-08-12FIX AVAILABLE
CVE-2026-19251
2026-09-02FIX AVAILABLE
CVE-2023-31216
CVSS 8.8 HIGH 2023-07-17FIX AVAILABLE
CVE-2022-3361
CVSS 4.3 MEDIUM 2022-11-29
CVE-2022-1209
CVSS 5.4 MEDIUM 2022-04-29FIX AVAILABLE
CVE-2015-8354 2 exploits
CVSS 6.1 MEDIUM 2017-09-11FIX AVAILABLE