Read the original article: Ultimate Member Plugin for WordPress Allows Site Takeover
Three critical security bugs allow for easy privilege escalation to an administrator role.
Read the original article: Ultimate Member Plugin for WordPress Allows Site Takeover