WordPress plugin
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical4
- High6
- Medium2
- Low0
All Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Unauthenticated SQL Injection ≤3.1.0No patch available | CVE-2022-0769 | |
| Medium5.4 | Cross-Site Scripting via p_name parameter <1.5.63Update to 1.5.63 | CVE-2015-9392 | |
| High8.8 | Cross-Site Request Forgery <1.5.63Update to 1.5.63 | CVE-2015-9394 | |
| Medium6.1 | Cross-Site Scripting <1.5.63Update to 1.5.63 | CVE-2015-9393 | |
| High8.8 | Authenticated Blind SQL Injection <1.5.64Update to 1.5.64 | CVE-2015-9395 | |
| High8.8 | Arbitrary File Upload <1.5.59Update to 1.5.59 | CVE-2015-9402 | |
| Critical9.8 | Multiple SQL Injection ≤1.5.15Update to 1.5.16 | CVE-2015-4109 | |
| High7.2 | SQL Injection ≤1.4.95Update to 1.4.96 | — | |
| High8.8 | SQL Injection <1.4.36Update to 1.4.36 | — | |
| Critical9.8 | SQL Injection ≤1.3.58Update to 1.3.59 | — | |
| Critical9.8 | SQL Injection ≤1.3.58Update to 1.3.59 | — | |
| High8.8 | SQL Injection ≤3.1.0No patch available | — |
- Critical9.8Unauthenticated SQL Injection
≤3.1.0No patch available
- Medium5.4Cross-Site Scripting via p_name parameter
<1.5.63Update to 1.5.63
- High8.8Cross-Site Request Forgery
<1.5.63Update to 1.5.63
- Medium6.1Cross-Site Scripting
<1.5.63Update to 1.5.63
- High8.8Authenticated Blind SQL Injection
<1.5.64Update to 1.5.64
- High8.8Arbitrary File Upload
<1.5.59Update to 1.5.59
- Critical9.8Multiple SQL Injection
≤1.5.15Update to 1.5.16
- High7.2SQL Injection
≤1.4.95Update to 1.4.96
- High8.8SQL Injection
<1.4.36Update to 1.4.36
- Critical9.8SQL Injection
≤1.3.58Update to 1.3.59
- Critical9.8SQL Injection
≤1.3.58Update to 1.3.59
- High8.8SQL Injection
≤3.1.0No patch available
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin: common questions
Does Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin have known vulnerabilities?
Yes. VulnCrest Radar lists 12 known vulnerabilities in Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin: 4 critical, 6 high, 2 medium. At least one is not fixed in the latest version.
How do I check which version of Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin vulnerability?
CVE-2022-0769, published Apr 13, 2022: Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 3.1.0 - Unauthenticated SQL Injection. Severity: Critical (CVSS 9.8).
Is any Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin vulnerability listed in CISA KEV?
No. None of the known Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin vulnerabilities is currently listed in the CISA KEV catalog.