Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin

Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2022; 10 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 8.5, and the most serious one scores 9.8 out of 10. Severity breakdown: 4 critical and 6 high. 2015 was the busiest year with 8 disclosures.

The most common weakness is SQL Injection, behind 8 of the records (67%). Other recurring categories include Cross-Site Scripting, Cross-Site Request Forgery (CSRF).

10 of the records (83%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2014.

4 independent researchers contributed these findings, most of them (6) reported by Panagiotis Vagenas.