CVE-2025-13220 | Ultimate Member Plugin up to 2.11.0 on WordPress Shortcode cross site scripting

A vulnerability was found in Ultimate Member Plugin up to 2.11.0 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Shortcode Handler. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-13220. It is possible to launch the attack remotely. No exploit is available.