What’s Vulnerable › Products

ultimatemember ForumWP – Forum & Discussion Board vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your ultimatemember ForumWP – Forum & Discussion Board version is affected

Latest ultimatemember ForumWP – Forum & Discussion Board vulnerabilities

• CVE-2025-13746 — ForumWP – Forum & Discussion Board <= 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name (CVSS 6.4)
• CVE-2025-67474 — WordPress ForumWP plugin <= 2.1.4 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-54367 — WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability (CVSS 9.8)
• CVE-2024-11204 — ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting via url Parameter (CVSS 6.1)
• CVE-2024-10879 — ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2024-8428 — ForumWP – Forum & Discussion Board Plugin <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover (CVSS 8.8)