Known vulnerabilities in ForumWP – Forum & Discussion Board Plugin

Vendor: Ultimate Member
Software: ForumWP – Forum & Discussion Board Plugin
Software CPE: cpe:2.3:a:ultimatemember:forumwp:*:*:*:*:*:wordpress:*:*
Website: https://profiles.wordpress.org/ultimatemember/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ForumWP – Forum & Discussion Board Plugin ForumWP – Forum & Discussion Board Plugin is affected by 2 known vulnerabilities: 2 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101330 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-11204		 CWE-79 Low
No
No
 - 06.12.2024 SB2024120638
#VU101329 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10879		 CWE-79 Low
No
No
 - 06.12.2024 SB2024120638