CVE-2026-11766 | Ultimate Member Plugin up to 2.11.x Profile Field Output Value cross site scripting

A vulnerability was found in Ultimate Member Plugin up to 2.11.x. It has been rated as problematic. This affects an unknown function of the component Profile Field Output Handler. The manipulation of the argument Value leads to cross site scripting.

This vulnerability is traded as CVE-2026-11766. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More