Advisories · Technology
WP User Manager.
Every CVE that names WP User Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerability
- WP User Manager
- Broken access control
- CVSS 8.1 High
WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnect
- WP User Manager
- Privilege escalation
- CVSS 4.3 Medium
WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerability
- WP User Manager
- Broken access control
- CVSS 5.3 Medium
WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass
- WP User Manager
- Broken access control
- CVSS 5.3 Medium
WordPress WP User Manager plugin <= 2.9.24 - Broken Access Control vulnerability
- WP User Manager
- Broken access control
- CVSS 4.3 Medium
WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability
- WP User Manager
- Broken access control
- CVSS 6.5 Medium
WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability
- WP User Manager
- Broken access control
- CVSS 5.3 Medium
WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability
- WP User Manager
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability
- WP User Manager
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability
- WP User Manager
- Insecure deserialization
- CVSS 4.3 Medium
WordPress WP User Manager – User Profile Builder & Membership plugin <= 2.9.10 - Cross Site Request Forgery (CSRF) vulnerability
- WP User Manager
- Cross-site request forgery (CSRF)