CVE-2020-36157
10.0
CRITICAL · CVSS 3.1 · EPSS 3% (pctl 87)
In your normal cycle
Critical by CVSS (10), but no sign of active exploitation.
Description
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that could be supplied during the registration process, an attacker could supply the role parameter with a WordPress capability (or any custom Ultimate Member role) and effectively be granted those privileges.
Scoring
| CVSS | 10.0 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| EPSS | 3% — more likely to be exploited than 87% of all CVEs |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2021-01-04 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| ultimatemember | ultimate member |
References
- https://wordpress.org/plugins/ultimate-member/#developers
- https://wpscan.com/vulnerability/33f059c5-58e5-44b9-bb27-793c3cedef3b
- https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/
- https://wordpress.org/plugins/ultimate-member/#developers
- https://wpscan.com/vulnerability/33f059c5-58e5-44b9-bb27-793c3cedef3b
- https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/
→ the Explorer · watch your stack · NVD