CVE-2026-107625 | UltimateMember Ultimate Member Plugin up to 2.14.0 on WordPress user_url cross site scripting

October 28, 2026 Yanac

A vulnerability labeled as problematic has been found in UltimateMember Ultimate Member Plugin up to 2.14.0 on WordPress. The impacted element is an unknown function. Executing a manipulation of the argument user_url can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-107625. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More