What’s Vulnerable › Vulnerabilities

CVE-2020-6859

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-13 · updated 2026-06-17
• Weakness: CWE-639

Description

Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remote attackers to change other users' profiles and cover photos via a modified user_id parameter. This is related to ajax_image_upload and ajax_resize_image.

Affected products

• ultimatemember Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership P: through 2.1.2

References

• https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L269
• https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L310
• https://github.com/ultimatemember/ultimatemember/commit/249682559012734a4f7d71f52609b2f301ea55b1
• https://wordpress.org/plugins/ultimate-member/#developers
• https://wpvulndb.com/vulnerabilities/10041
• https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L269
• https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L310
• https://github.com/ultimatemember/ultimatemember/commit/249682559012734a4f7d71f52609b2f301ea55b1
• https://wordpress.org/plugins/ultimate-member/#developers
• https://wpvulndb.com/vulnerabilities/10041

Get alerted when CVE-2020-6859 or the next vulnerability affects your stack