Wpusermanager
4 CVEs across 2 Wpusermanager products. Browse Wpusermanager vulnerabilities, severities, and proof-of-concept exploits.
Wpusermanager products with known CVEs
Wpusermanager CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-9290 | High | 7.5 | 2026-06-06 | The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.17… |
CVE-2025-13320 | Medium | 6.8 | 2025-12-12 | The WP User Manager plugin for WordPress is vulnerable to Arbitrary File Deletion in all versions up to, and including, 2.9.12. This is due to insufficient val… |
CVE-2024-10537 | Medium | 4.3 | 2024-11-23 | The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on… |
CVE-2024-10216 | Medium | 4.3 | 2024-11-23 | The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che… |
CVE-2024-43336 | Medium | 4.3 | 2024-08-26 | Cross-Site Request Forgery (CSRF) vulnerability in WP User Manager WP User Manager wp-user-manager.This issue affects WP User Manager: from n/a through <= 2.9… |
CVE-2021-24655 | High | 7.5 | 2022-07-17 | The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any… |