WordPress security by component

Ultimate Member Widgets for Elementor – WordPress User Directory

Plugin description

Ultimate Member Widgets for Elementor – WordPress User Directory is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 20, 2025; the highest CVE/CNA score is 5.3.

Plugin slug: ultimate-member-widgets-for-elementor-wordpress-user-directory

Latest vulnerability

CVE-2025-12778: Ultimate Member Widgets for Elementor – WordPress User Directory: A security weakness

Ultimate Member Widgets for Elementor – WordPress User Directory is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedNov 20, 2025

Safe version guidanceSee mitigation notes

		Safe version
Nov 20, 2025	CVE-2025-12778 Ultimate Member Widgets for Elementor – WordPress User Directory: A security weakness Ultimate Member Widgets for Elementor – WordPress User Directory is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending