security issue

Same here, wordfence picked it up. Plugin disabled for now

Also the same here. When will there be an upgrade to safer version available?

Hi?@huangwuko

Thanks for your question. We are working on the fixes related to this vulnerability since 2.6.3 version when we get a report from one of our customer. Versions 2.6.4, 2.6.5, 2.6.6 partially close this vulnerability but we are still working together with WPScan team for getting the best result. We also get their report with all necessary details.

All previous versions are vulnerable so we highly recommend to upgrade your websites to 2.6.6 and keep updates in the future for getting the recent security and feature enhancements.

We are currently working on fixing a remaining issue and will release a further update as soon as possible.

Let me know if you have other questions,
Best Regards!

HI, Any update on the security issue. When do you expect a fix. We need to know if we can wait for your update or find an alternative solution. Thanks

@emmazug

UM 2.6.7 will be available later today.

https://github.com/ultimatemember/ultimatemember/pull/1230

That is great. Many Thanks

@emmazug, @uruburu, @jimmyeao, @huangwuko

Release notes for UM 2.6.7

https://github.com/ultimatemember/ultimatemember/releases/tag/2.6.7

@huangwuko, @jimmyeao, @uruburu, @emmazug

UM version 2.6.7 is available now.

Security Incident Update and Recommended Actions

Hi @huangwuko

This thread has been inactive for a while so we’re going to go ahead and mark it Resolved.

Please feel free to re-open this thread if any other questions come up and we’d be happy to help. ??

Regards