← Back to CVE search

CVE-2026-25357

Ultimate Membership Pro

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro allows Authentication Abuse.This issue affects Ultimate Membership Pro: from n/a through <= 13.7.

CVSS 8.1EPSS 0.34199999999999997%Risk 0.83
View source
Published
2026-03-25 17:16:46
Affected versions
<= 13.7
Type
Package
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N