CRITICAL
9.8 CVE-2026-115968 Published 28 Oct 2026
Ultimate Member WordPress Plugin Object Injection Vulnerability
Worried this affects your website?
A Deserialization of Untrusted Data vulnerability has been found in the Ultimate Member WordPress plugin, allowing Object Injection.
The issue affects Ultimate Member versions from n/a through 2.13.1.
Reference: CVE-2026-115968 on NVD
← Back to Security News