CVE-2026-85680 | Ultimate Member Plugin up to 2.13.0 on WordPress cross site scripting

September 19, 2026 Yanac

A vulnerability classified as problematic was found in Ultimate Member Plugin up to 2.13.0 on WordPress. This issue affects some unknown processing. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-85680. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More