CVE-2026-7761 - Ultimate Member <= 2.11.4 - Authenticated (Contributor+) Account Takeover via Password Reset Link Disclosure
CVE ID :CVE-2026-7761 Published : June 24, 2026, 6:49 a.m. | 6 hours, 21 minutes ago Description :The Ultimate Member plugin for WordPress is vulnerable to Account Takeover via Password Reset Link Disclosure in all versions up to and including 2.11.4. This is due to a chain of three logic...