A vulnerability labeled as critical has been found in Ultimate Member Plugin up to 2.11.0 on WordPress. Affected is the function
required_perm of the component Setting Handler. Such manipulation leads to improper access controls.
This vulnerability is uniquely identified as CVE-2025-14081. The attack can be launched remotely. No exploit exists.
