Gm Alex

3 CVEs in 1 Gm Alex product, including User Access Manager. Newest: CVE-2026-19797 (2026-09-09). Severity, EPSS and public exploits for each.

Gm Alex products with known CVEs

ProductCVEs
User Access Manager3
Gm Alex CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-19797Medium6.12026-09-09The User Access Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_group_section' parameter in all versions up to, and i…
CVE-2026-15281Medium6.52026-08-05The User Access Manager plugin for WordPress is vulnerable to Second-Order SQL Injection via the 'id' parameter of the wp_ajax_save-attachment-compat AJAX acti…
CVE-2026-18352High7.52026-08-02The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter p…