CVE-2018-13136
The Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen.
Date published : 2018-07-04
https://github.com/ultimatemember/ultimatemember/issues/456
https://github.com/ultimatemember/ultimatemember/releases/tag/2.0.18
