What is Ultimate Member?
Ultimate Member is an extremely popular plugin for WordPress that allows visitors to sign-up and become members of your website. With over 100,000 active installations, lots of sites rely on it to manage memberships, add registration forms, and restrict content on their site.
There is also a premium version of the plugin that is available as part of a monthly subscription that unlocks integrations with other popular plugins, such as WooCommerce and MailChimp, and adds more features for the user registration process.
What is wrong?
Our friends at Wordfence discovered several critical privilege escalation vulnerabilities in the newest version of Ultimate Member. These security holes make it possible for attackers to gain administrative access to WordPress sites.
Luckily, the developers responded quickly and patched the files as soon as they were notified. If your site is running v 2.1.11 of Ultimate Member, we recommend updating to v2.1.12 or higher immediately!