Skip to main content

CVE detail

CVE-2020-36170

The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms.

CVSS 5.3 · Medium