Gm Alex User Access Manager
3 CVEs affecting Gm Alex User Access Manager. Latest disclosed: 2026-09-09. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-18352 | High | 7.5 | 2026-08-02 | The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter p… |
CVE-2026-15281 | Medium | 6.5 | 2026-08-05 | The User Access Manager plugin for WordPress is vulnerable to Second-Order SQL Injection via the 'id' parameter of the wp_ajax_save-attachment-compat AJAX acti… |
CVE-2026-19797 | Medium | 6.1 | 2026-09-09 | The User Access Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_group_section' parameter in all versions up to, and i… |