Security Advisory
CVE-2018-0589
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to add a new form in the Forms page via unspecified vectors.