CVE-2020-36157
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Roles
criticalImproper Privilege Management
10.0
CVSS Score
10.0
CVSS Score
critical
Severity
2.1.12
Patched in
1170d
Time to patch
Description
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that could be supplied during the registration process, an attacker could supply the role parameter with a WordPress capability (or any custom Ultimate Member role) and effectively be granted those privileges.
CVSS Vector Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HAttack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
High
Confidentiality
High
Integrity
High
Availability
Technical Details
Affected versions
<2.1.12PublishedNovember 9, 2020
Last updatedJanuary 22, 2024
Affected pluginultimate-member
Check if your site is affected.
Run a free security audit to detect vulnerable plugins, outdated versions, and misconfigurations.