The plugin, called Ultimate Member, allows web admins to add user profiles and membership areas to their web destinations.

Hackers exploit a zero-day privilege escalation vulnerability in the 'Ultimate Member' WordPress plugin to compromise websites by bypassing security measures and registering rogue administrator ...

Ultimate Member WordPress plugin issued a patch for three critical and severe exploits that grant attackers total control of a site.

Vulnerability in WordPress plugin with 200,000+ active installations allows full site takeover with only "trivial" effort ...