Giovambattista Ianni

**Name of the Vulnerable Software and Affected Versions** Ultimate Member WordPress plugin versions prior to 2.13.0 **Description** The plugin fails to verify if a comment has been approved or if the associated profile is set to private before displaying profile activity to unauthenticated visitors. This allows unauthorized users to read the content of comments that are still awaiting moderation. **Recommendations** Update the plugin to version 2.13.0 or later.