Security WordPress Ultimate Member 1.3.28 Cross Site Scripting December 2, 2015 007admin Leave a comment WordPress Ultimate Member plugin version 1.3.28 suffers from a cross site scripting vulnerability.