CVE-2026-62059

The vulnerability in Ultimate Member allows for Blind SQL Injection due to improper neutralization of special elements in SQL commands, potentially enabling attackers to manipulate database queries. This could lead to unauthorized data access or data leakage, posing a significant risk to the integrity and confidentiality of the affected systems. Organizations using Ultimate Member versions up to 2.13.1 should prioritize remediation to mitigate the risk of exploitation.