What’s Vulnerable › Products

azzaroco Ultimate Membership Pro vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your azzaroco Ultimate Membership Pro version is affected

Latest azzaroco Ultimate Membership Pro vulnerabilities

• CVE-2026-25357 — WordPress Ultimate Membership Pro plugin <= 13.7 - Account Takeover vulnerability (CVSS 8.1)
• CVE-2020-36832 — Indeed Membership Pro 7.3 - 8.6 - Authentication Bypass (CVSS 9.8)
• CVE-2024-43242 — WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability (CVSS 10.0)
• CVE-2024-43240 — WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability (CVSS 9.8)
• CVE-2024-43241 — WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)