GHSA-mx72-jqqr-rmpp: Authorization bypass in the Ultimate Member plugin
The Ultimate Member WordPress plugin is vulnerable to authorization bypass in all versions up to and including 2.13.1. Unauthenticated attackers can view privacy-restricted member profile field values.
CERT24