The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login as any user, including the site administrator with a default user ID of 1, via the username or user ID.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Indeed Membership Pro Plugin | — | Update indeed-membership-pro plugin to version 8.6.1, or a newer patched version | May 15, 2025 | Feb 6, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub