CVE-2020-36832

Name of the Vulnerable Software and Affected Versions Ultimate Membership Pro plugin for WordPress versions 7.3 through 8.6

Description The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass. This makes it possible for unauthenticated attackers to login as any user, including the site administrator with a default user ID of 1, via the username or user ID.

Recommendations For versions 7.3 through 8.6, update to a version that is not affected by this issue to prevent Authentication Bypass attacks. As a temporary workaround, consider restricting access to sensitive areas of the site to minimize the risk of exploitation.