Privilege Escalation Vulnerability in Ultimate Membership Pro

CVE-2024-43240

What is CVE-2024-43240?

A vulnerability identified in Azzaroco's Ultimate Membership Pro, an established membership management plugin for WordPress, poses a risk of privilege escalation due to improper management of user privileges. This may allow unauthorized users to gain elevated access and potentially exploit the application, affecting users from earlier versions up to and including version 12.6. As the security of application data is paramount, users of this product are advised to assess their installations and apply necessary updates or mitigations.

References