CVE-2015-9402 (users_ultra_membership)

The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.

CVE-2015-9392 (users_ultra_membership)
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter. View Full Alert
CVE-2015-9393 (users_ultra_membership)
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter. View Full Alert
CVE-2015-9395 (users_ultra_membership)
The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action. View Full Alert