WordPress Ultimate Member Plugin SQL Injection (CVE-2024-1071)

Related Vulnerabilities: CVE-2024-1071  

Check Point Reference: CPAI-2024-0132 Date Published: 25 Mar 2024 Severity: Critical Last Updated: Monday 25 March, 2024 Source: Industry Reference:CVE-2024-1071
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? WordPress Ultimate Member plugin 2.1.3 to 2.8.2 Vulnerability Description An SQL injection vulnerability exists in WordPress Ultimate Member plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.