3Eki
CVE-2024-8520 | Ultimate Member Plugin up to 2.8.6 on WordPress Membership Status cross-site request forgery
A vulnerability classified as problematic has been found in Ultimate Member Plugin up to 2.8.6 on WordPress. This affects an unknown part of the component Membership Status Handler. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2024-8520. It is possible to initiate the attack remotely. There is no exploit available.