CVE-2026-1404 | Ultimate Member Plugin up to 2.11.1 on WordPress Filter filter_first_name cross site scripting

Full Article URL: https://vuldb.com/?id.346448
Textarea URL (this page): <a href="https://textarea.nl/i/eNrLKCkpKLbS1y8rzUlJ0kvOz9W3z0zRMzYxMzGxAACQSQj8_2026-02-18">https://textarea.nl/i/eNrLKCkpKLbS1y8rzUlJ0kvOz9W3z0zRMzYxMzGxAACQSQj8_2026-02-18
Source: https://vuldb.com/?rss.recent
Vuldb: https://vuldb.com
Publication date: 2026-02-18 07:09:03
Last retrieval: 2026-02-18 08:46:17.252051

07:09 - 18 Feb 2026

vuldb.com

A vulnerability has been found in Ultimate Member Plugin up to 2.11.1 on WordPress and classified as problematic. This affects the function filter_first_name of the component Filter Handler. This manipulation causes cross site scripting. This vulnerability is tracked as CVE-2026-1404. The attack is possible to be carried out remotely. No exploit exists.

https://vuldb.com/?id.346448

Article info: