CVE-2026-19251 in Ultimate Member Plugininformación

Resumen

por MITRE • 2026-09-02

The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the profile it belongs to is private, before returning profile activity to unauthenticated visitors, allowing them to read the content of comments still awaiting moderation.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

WPScan

Reservar

2026-08-07

Divulgación

2026-09-02

Moderación

aceptado

Artículo

VDB-398020

CPE

listo

EPSS

0.00000

KEV

no

Actividades

bajo

Sector

Hostingprovider

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-19251
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-19251
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-19251/

◂ AnteriorVisión De ConjuntoPróximo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!