What is the CVSS score of CVE-2026-11766?

CVE-2026-11766 has a CVSS 3.1 base score of 8.0 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Is there a public PoC exploit available for CVE-2026-11766?

Yes, a public proof-of-concept exploit is available for CVE-2026-11766. Prioritise patching immediately. EPSS: 0.2%.

Is there a patch available for CVE-2026-11766?

Yes, a patch is available for CVE-2026-11766. Update the affected software to the latest version immediately.

Ultimate Member CVE-2026-11766

EUVD-2026-41819 HIGH

2026-07-06 WPScan

GHSA-qhrq-pqx6-6f9v

WordPress Information Disclosure Ultimate Member

8.0

CVSS 3.1 · Vendor: WPScan

Severity by source

Vendor (WPScan) PRIMARY

8.0 HIGH

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (WPScan) · only source for this CVE.

CVSS VectorVendor: WPScan

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jul 06, 2026 - 09:01 EUVD

CVE Published

Jul 06, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

The Ultimate Member WordPress plugin before 2.12.0 does not properly sanitise and escape the value of custom textarea profile fields before outputting it on user profiles, allowing authenticated users with Subscriber-level access and above to store JavaScript that executes when any user, including an administrator, views the affected profile.

Articles & Coverage 1

News 6 New WordPress Vulnerabilities - 1 Critical, 5 High, All With POC Jul 07, 2026

Analysis

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Ultimate Member

View all

CVE-2022-3384 HIGH Act Now POC

7.2 Nov 29

The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0

CVE-2022-3383 HIGH Act Now POC

7.2 Nov 29

The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0

CVE-2024-1071 CRITICAL Act Now POC

9.8 Mar 13

The Ultimate Member - User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

CVE-2023-3460 CRITICAL Act Now POC

9.8 Jul 04

The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary c

CVE-2024-2123 HIGH Act Now

7.2 Mar 13

The Ultimate Member - User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

CVE-2019-10270 HIGH This Week POC

8.8 Jun 21

An arbitrary password reset issue was discovered in the Ultimate Member plugin 2.39 for WordPress. Rated high severity (

CVE-2019-10673 HIGH This Week POC

8.8 Apr 03

A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress a

CVE-2022-1208 MEDIUM This Month POC

6.4 Jun 13

The Ultimate Member plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Biography field featured o

CVE-2015-8354 MEDIUM This Month POC

6.1 Sep 11

Cross-site scripting (XSS) vulnerability in the Ultimate Member WordPress plugin before 1.3.29 for WordPress allows remo

CVE-2018-17866 MEDIUM This Month POC

6.1 Oct 09

Multiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User

CVE-2018-6944 MEDIUM This Month POC

6.1 Feb 16

core/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerabili

CVE-2022-3361 MEDIUM This Month POC

4.3 Nov 29

The Ultimate Member plugin for WordPress is vulnerable to directory traversal in versions up to, and including 2.5.0 due

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2026-11766 vulnerability details – vuln.today

Back

Ultimate Member CVE-2026-11766

Severity by source

CVSS VectorVendor: WPScan

Lifecycle Timeline

DescriptionCVE.org

Articles & Coverage 1

Analysis

Unlock full vulnerability intelligence

More in Ultimate Member

Same technique Information Disclosure

Share

External POC / Exploit Code