OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-96451

HIGH · CVSS 8.8 EPSS 0.30%

Source: NVD + CISA KEV + EPSS · Published 2026-10-03 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

Ultimate Member versions up to 2.13.1 are vulnerable to an authorization bypass due to a flaw that allows users to escalate their privileges. This vulnerability can lead to unauthorized access to restricted features or data, posing a significant risk to user security and data integrity. Organizations using this plugin should prioritize applying updates to mitigate potential exploitation.

CVE
CVE-2026-96451
Severity
HIGH
CVSS
8.8
EPSS
0.30%

Original NVD Description

Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.