Wp User Manager - vulnerabilities (CVEs)

8 CVEs in 1 products, 4 in the last 30 days, newest from 2026-10-20.

Products

CVE-2026-112823 - CVSS 4.3 (medium), 2026-10-20: Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Manipulating User State.This issue affects WP User Manager: from…
CVE-2026-108496 - CVSS 5.3 (medium), 2026-10-13: Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security…
CVE-2026-107423 - CVSS 4.3 (medium), 2026-10-12: Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security…
CVE-2026-103085 - CVSS 6.5 (medium), 2026-10-05: Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a…
CVE-2026-94079 - CVSS 5.3 (medium), 2026-09-23: Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions.
CVE-2026-49766 - CVSS 9.9 (critical), 2026-06-15: Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions.
CVE-2025-60245 - CVSS 9.8 (critical), 2025-11-06: Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager:…
CVE-2024-43336 - CVSS 4.3 (medium), 2024-08-26: Cross-Site Request Forgery (CSRF) vulnerability in WP User Manager WP User Manager wp-user-manager.This issue affects WP User Manager: from n/a through <=…