PT-2026-104586 · WordPress · Ultimate Member

CVE-2026-96451

Published

2026-10-03

Updated

2026-10-03

CVSS v3.1

8.8

High

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ultimate Member versions prior to 2.13.2

Description An authorization bypass exists due to a user-controlled key, which allows for privilege escalation.

Recommendations Update to version 2.13.2 or later.

Fix

LPE

IDOR

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-96451

Ultimate Member