WordPress Plugin Alert - Critical SQLi Vulnerability Threatens 200K+ Websites

27 February 2024

A critical security flaw (CVE-2024-1071) in the Ultimate Member WordPress plugin allowed unauthenticated attackers to perform SQL injection and extract sensitive data, affecting users who enabled the "Enable custom table for usermeta" option.

>>More

We use cookies to ensure you get the best experience on our website. Cookie policy