Usersultra Users Ultra Membership — known CVE vulnerabilities

Every CVE whose affected-product data names Usersultra Users Ultra Membership, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2015-9394 — CVSS 8.8 (high): The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.
• CVE-2015-9395 — CVSS 8.8 (high): The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.
• CVE-2015-9402 — CVSS 8.8 (high): The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.
• CVE-2015-9392 — CVSS 5.4 (medium): The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.
• CVE-2015-9393 — CVSS 5.4 (medium): The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.