← Database

CVE-2024-54367

CRITICAL CVSS: 9.8 Published: 2024-12-16 Modified: 2026-06-17

Description

Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through <= 2.1.0.

Affected Platforms

Ultimatemember Forumwp

Weakness Type

CWE-502

References