medium5.3
CVE-2020-36170
The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms.
Impact
The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ultimatemember | Ultimate Member | before 2.1.13 |