How many Ultimate Member forumwp CVEs are in CISA KEV?

None of Ultimate Member forumwp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Ultimate Member forumwp are affected?

12 distinct Ultimate Member forumwp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Ultimate Member forumwp CVEs?

Ultimate Member forumwp's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-502 (Deserialization of Untrusted Data), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).

How many critical Ultimate Member forumwp vulnerabilities are there?

Ultimate Member forumwp has 1 critical and 1 high-severity CVEs.

What is the average severity of Ultimate Member forumwp CVEs?

The average CVSS base score across Ultimate Member forumwp's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Ultimate Member

5 CVEs

Ultimate Member forumwp Vulnerabilities

Name: Ultimate Member forumwp vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for forumwp by Ultimate Member.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.0

Avg CVSS

2024–2025

Last updated December 9, 2025

Overview

Ultimate Member forumwp has 5 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Ultimate Member forumwp, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Ultimate Member forumwp's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Ultimate Member forumwp's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Ultimate Member forumwp CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Ultimate Member forumwp version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2.1.32 CVEs
< 2.1.11 CVE
<= 2.0.21 CVE
<= 2.1.01 CVE
<= 2.1.41 CVE
>= 2.1.11 CVE
>= 2.1.51 CVE

Fixed in

2.1.32 CVEs
> 2.1.01 CVE
> 2.1.41 CVE
2.1.11 CVE
2.1.51 CVE

Find a version

5 CVEs

Sort

WordPress ForumWP plugin <= 2.1.4 - Broken Access Control vulnerability
CVE-2025-67474
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.2% (11th pct)2025-12-09
WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability
CVE-2024-54367
Patch
CWE-502
Critical · CVSS 9.8
EPSS 0.7% (49th pct)2024-12-16
ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting via url Parameter
CVE-2024-11204
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.3% (27th pct)2024-12-06
ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting
CVE-2024-10879
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.4% (31th pct)2024-12-06
ForumWP – Forum & Discussion Board Plugin <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover
CVE-2024-8428
Patch
CWE-639
High · CVSS 8.8
EPSS 0.5% (39th pct)2024-09-06

Common weakness types

The CWE weakness categories most often found in Ultimate Member forumwp CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Ultimate Member forumwp CVEs were published each year.

2024

4

2025

1

Other Ultimate Member products

Browse vulnerabilities for other products by Ultimate Member.

ultimate member43 CVEs ultimatemember35 CVEs Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin25 CVEs user profile & membership7 CVEs ForumWP – Forum & Discussion Board4 CVEs jobboardwp4 CVEs registration2 CVEs contentrestriction1 CVEs

All Ultimate Member vulnerabilities

Frequently asked questions

Common questions about Ultimate Member forumwp vulnerabilities.

How many CVEs does Ultimate Member forumwp have?: Ultimate Member forumwp has 5 published CVE records since 2024.
How many Ultimate Member forumwp CVEs are in CISA KEV?: None of Ultimate Member forumwp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Ultimate Member forumwp vulnerabilities?: No Ultimate Member forumwp CVEs currently have a tracked public exploit in this dataset.
Which versions of Ultimate Member forumwp are affected?: 12 distinct Ultimate Member forumwp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Ultimate Member forumwp CVEs?: Ultimate Member forumwp's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-502 (Deserialization of Untrusted Data), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).
How many critical Ultimate Member forumwp vulnerabilities are there?: Ultimate Member forumwp has 1 critical and 1 high-severity CVEs.
What is the average severity of Ultimate Member forumwp CVEs?: The average CVSS base score across Ultimate Member forumwp's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Ultimate Member forumwp vulnerabilities

Monitor new Ultimate Member forumwp vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing