CVE-2026-12251
Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable on its registration forms, and its post-registration safeguard against elevated accounts is disabled by default, allowing unauthenticated users to register with a site-defined role that carries administrator capabilities and gain administrative access, when such a role exists and a role-selection field is present on a published registration form.
| Vendor | unknown |
| Product | ultimate member |
| Published | Jul 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown ultimate member
Be the first to know when new unknown vulnerabilities affecting unknown ultimate member are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Ultimate Member
0 < 2.12.1
References
Credits
Haitam Lazaar WPScan