Wp User Manager Wp User Manager
6 CVEs affecting Wp User Manager Wp User Manager. Latest disclosed: 2026-10-12. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-49766 | Critical | 9.9 | 2026-06-15 | Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions. |
CVE-2025-60245 | Critical | 9.8 | 2025-11-06 | Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager… |
CVE-2026-103085 | Medium | 6.5 | 2026-10-05 | Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a th… |
CVE-2026-94079 | Medium | 5.3 | 2026-09-23 | Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions. |
CVE-2026-107423 | Medium | 4.3 | 2026-10-12 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2024-43336 | Medium | 4.3 | 2024-08-26 | Cross-Site Request Forgery (CSRF) vulnerability in WP User Manager WP User Manager wp-user-manager.This issue affects WP User Manager: from n/a through <= 2.9… |