CVE-2026-107625

Name of the Vulnerable Software and Affected Versions Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin versions prior to 2.14.1

Description Insufficient input sanitization and output escaping allow authenticated attackers with subscriber-level access and above to perform Stored Cross-Site Scripting (XSS). This occurs via the user url parameter, enabling the injection of arbitrary web scripts into pages. These scripts execute when a user visits the affected page, specifically when clicking the attacker's Website URL link on their public profile. This is facilitated by the redirect-confirmation onclick handler, which is enabled by default on new installations.

Recommendations Update to a version newer than 2.14.0. Restrict the use of the user url parameter in user profiles until the update is applied.