CVE-2020-36832

Published: 2024-10-16T07:15Z

Last Modified: 2024-10-16T16:38Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login as any user, including the site administrator with a default user ID of 1, via the username or user ID. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt