SQL Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. WordPress Ultimate Member 2.1.3 - 2.8.2 – SQL InjectionCVE-2024-1071ultimatemember · CVSS 9.8 · 89% likely

   CWE-89

2. Ultimate Member <= 2.10.0 - Unauthenticated SQL Injection via search ParameterCVE-2025-1702ultimatemember · CVSS 7.5 · 0.7% likely

   CWE-89

3. Ultimate Member <= 2.9.1 - Unauthenticated SQL InjectionCVE-2025-0308ultimatemember · CVSS 7.5 · 0.5% likely

   CWE-89

4. Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.10.1 - Unauthenticated Blind SQL InjectionCVE-2026-15290ultimatemember · CVSS 7.5 · 0.5% likely

   CWE-89

5. Ultimate Member <= 2.9.2 - Authenticated SQL InjectionCVE-2024-12276ultimatemember · CVSS 5.3 · 0.4% likely

   CWE-89

6. WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerabilityCVE-2026-62059Ultimate Member · CVSS 7.6 · 0.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.