<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wp-user-manager</title><description>Every new CVE for wp-user-manager.</description><link>https://agentprime.io/</link><item><title>CVE-2026-116846: WordPress WP User Manager plugin &lt;= 2.9.26 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-116846/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116846/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 14:14:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110523: WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnect</title><link>https://agentprime.io/advisories/CVE-2026-110523/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110523/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Oct 2026 06:00:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-112823: WordPress WP User Manager plugin &lt;= 2.9.25 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-112823/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-112823/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 15:14:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110527: WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass</title><link>https://agentprime.io/advisories/CVE-2026-110527/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110527/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 17 Oct 2026 06:00:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-108496: WordPress WP User Manager plugin &lt;= 2.9.24 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-108496/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108496/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 08:33:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107423: WordPress WP User Manager plugin &lt;= 2.9.22 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-107423/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107423/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Oct 2026 08:26:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103085: WordPress WP User Manager plugin &lt;= 2.9.20 - Privilege Escalation vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-103085/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103085/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 18:08:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-94079: WordPress WP User Manager plugin &lt;= 2.9.19 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-94079/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94079/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 18:14:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-49766: WordPress WP User Manager plugin &lt;= 2.9.16 - Arbitrary File Deletion vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-49766/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-49766/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 15 Jun 2026 20:19:24 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-60245: WordPress WP User Manager plugin &lt;= 2.9.12 - PHP Object Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-60245/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-60245/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Nov 2025 15:55:19 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-43336: WordPress WP User Manager – User Profile Builder &amp; Membership plugin &lt;= 2.9.10 - Cross Site Request Forgery (CSRF) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-43336/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-43336/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Aug 2024 20:34:59 GMT</pubDate><category>CVE</category></item></channel></rss>