SuitePlugins vulnerabilities
We track 3 vulnerabilities in SuitePlugins products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2025.
Latest SuitePlugins vulnerabilities
- 7.6 High severity
Video & Photo Gallery for Ultimate Member: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows SQL Injection.This issue affects Video & Photo Gallery for Ultimate
- 7.5 High severity
Login Widget for Ultimate Member: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SuitePlugins Login Widget for Ultimate Member login-widget-for-ultimate-member allows PHP Local File Inclusion.This issue affects Login Wid
- 9.9 Critical severity
Video & Photo Gallery for Ultimate Member: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows Upload a Web Shell to a Web Server.This issue affects Video & Photo Gallery for Ultimate Member: from n/a