Gm Alex

3 CVEs across 1 Gm Alex products. Browse Gm Alex vulnerabilities, severities, and proof-of-concept exploits.

Gm Alex products with known CVEs

ProductCVEs
User Access Manager3
Gm Alex CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-19797Medium6.12026-09-09The User Access Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_group_section' parameter in all versions up to, and i…
CVE-2026-15281Medium6.52026-08-05The User Access Manager plugin for WordPress is vulnerable to Second-Order SQL Injection via the 'id' parameter of the wp_ajax_save-attachment-compat AJAX acti…
CVE-2026-18352High7.52026-08-02The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter p…