Security Advisory
CVE-2018-0587
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to upload arbitrary image files via unspecified vectors.