CVE-2026-12251 | Ultimate Member Plugin up to 2.12.0 on WordPress Registration Form privileges management

July 31, 2026 Yanac

A vulnerability identified as critical has been detected in Ultimate Member Plugin up to 2.12.0 on WordPress. This impacts an unknown function of the component Registration Form. This manipulation causes improper privilege management.

The identification of this vulnerability is CVE-2026-12251. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More