A vulnerability in the popular Ultimate Member WordPress plugin enables account takeover by exposing password reset links.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is giving federal agencies until Sunday to patch a ...