ultimatemember ultimate member

Name: ultimatemember ultimate member
Brand: ultimatemember

productUS

cpe:2.3:a:ultimatemember:ultimate_member:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical7high22medium0low

updated 2026-10-27

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-1071US	—	89.4% (100th)	Exploit	2.8.3	2024-03-13	2.1.3 → 2.8.3
CVE-2023-3460US	critical9.8	72.3% (99th)	Exploit	2.6.7	2023-07-04	< 2.6.7
CVE-2024-2123US	medium6.1	26.7% (98th)	—	2.8.4	2024-03-13	< 2.8.4
CVE-2020-36155US	critical9.8	10.1% (96th)	—	2.1.12	2021-01-04	< 2.1.12
CVE-2022-3383US	high7.2	3.05% (87th)	—	no fix	2022-11-29	≤ 2.5.0
CVE-2022-3384US	high7.2	3.00% (87th)	—	no fix	2022-11-29	≤ 2.5.0
CVE-2020-36157US	critical9.8	3.00% (87th)	—	2.1.12	2021-01-04	< 2.1.12
CVE-2022-3361US	medium4.3	2.67% (86th)	—	no fix	2022-11-29	≤ 2.5.0
CVE-2020-6859US	medium5.3	2.17% (82nd)	—	no fix	2020-01-13	≤ 2.1.2
CVE-2015-8354US	medium6.1	2.10% (82nd)	—	no fix	2017-09-11	≤ 1.3.28
CVE-2020-36156US	high8.8	2.06% (81st)	—	2.1.12	2021-01-04	< 2.1.12
CVE-2019-10673US	high8.8	1.82% (79th)	—	2.0.40	2019-04-03	< 2.0.40
CVE-2018-17866US	medium6.1	1.65% (76th)	—	2.0.28	2018-10-09	< 2.0.28
CVE-2018-13136US	medium6.1	1.48% (74th)	—	2.0.18	2018-07-04	< 2.0.18
CVE-2019-10270US	high8.8	1.21% (68th)	—	2.0.40	2019-06-21	< 2.0.40
CVE-2018-6944US	medium6.1	1.18% (68th)	—	no fix	2018-02-16	= 2.0
CVE-2020-36170US	medium5.3	1.13% (66th)	—	2.1.13	2021-01-06	< 2.1.13
CVE-2016-10872US	medium6.1	1.05% (64th)	—	1.3.40	2019-08-12	< 1.3.40
CVE-2015-9304US	medium6.1	1.05% (64th)	—	1.3.18	2019-08-12	< 1.3.18
CVE-2018-20965US	medium6.1	1.04% (64th)	—	2.0.4	2019-08-12	< 2.0.4
CVE-2018-0585US	medium5.4	0.94% (61st)	—	2.0.4	2018-05-14	< 2.0.4
CVE-2022-1208US	medium5.4	0.90% (60th)	—	no fix	2022-06-13	≤ 2.3.2
CVE-2019-14947US	medium5.4	0.89% (59th)	—	2.0.52	2019-08-12	< 2.0.52
CVE-2019-14945US	medium5.4	0.88% (59th)	—	2.0.54	2019-08-12	< 2.0.54
CVE-2019-10271US	medium4.3	0.84% (58th)	—	2.0.40	2019-06-24	< 2.0.40
CVE-2022-3966US	high7.5	0.79% (56th)	—	2.5.1	2022-11-13	< 2.5.1
CVE-2019-14946US	medium5.4	0.78% (56th)	—	2.0.52	2019-08-12	< 2.0.52
CVE-2022-1209US	medium5.4	0.73% (54th)	—	no fix	2022-05-10	≤ 2.3.1
CVE-2021-24306US	medium5.4	0.62% (49th)	—	2.1.20	2021-05-24	< 2.1.20
CVE-2024-10528US	—OT elevated	0.58% (47th)	—	2.9.0	2024-11-21	< 2.9.0
CVE-2025-0308US	—	0.54% (45th)	—	2.9.2	2025-01-18	< 2.9.2
CVE-2024-2765US	—	0.50% (43rd)	—	2.8.5	2024-05-02	< 2.8.5
CVE-2024-8519US	medium5.4	0.44% (38th)	—	2.8.7	2024-10-04	< 2.8.7
CVE-2024-12276US	medium6.5	0.42% (36th)	—	2.10.0	2025-02-21	< 2.10.0
CVE-2025-0318US	—	0.36% (30th)	—	2.9.2	2025-01-18	< 2.9.2
CVE-2024-8520US	medium4.3	0.34% (28th)	—	2.8.7	2024-10-04	< 2.8.7
CVE-2023-31216US	high8.8	0.27% (19th)	—	no fix	2023-07-17	≤ 2.6.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')16 CVEs
CWE-352Cross-Site Request Forgery (CSRF)5 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan