CVE-2018-0588

Description

Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to read arbitrary files via unspecified vectors.

References

https://wpvulndb.com/vulnerabilities/9608

https://wordpress.org/plugins/ultimate-member/#developers

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1398

http://jvn.jp/en/jp/JVN28804532/index.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS