Three privilege escalation bugs have been found and patched in the latest version of the Ultimate Member WordPress plugin.
Click here for original story, These WordPress plugin bugs could jeopardize hundreds of thousands of sites
Source: Tech Radar