Skip to content
From our Community Blog:

Vulnerable WordPress Plugins Report for the Week of May 17, 2019

Subscribe to Community Blog updates

Vulnerable Plugins

There are nineteen issues this week, with five unfixed.  The most critical this week is the Sensitive Information Disclosure, Arbitrary File Deletion, and multiple Cross-Site Scripting vulnerabilities in Ultimate Member discovered by Sucri earlier this week. There was also a Local File Inclusion vulnerability disclosed in Photo Gallery by 10Web that does not appear to be fixed yet (as of the time of this post).

View this week's vulnerable plugins list.

Again, want to give a giant "thank you" to Pat Lockley for helping me compile this week's list!

Edit: added one more vulnerability to this week's list.

Login to WordPress