Wpusermanager WP User Manager vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Wpusermanager WP User Manager: 5 record(s), with affected versions and fixes.
CVE-2026-108496
Medium · 5.3
CWE-862 Oct 13, 2026
WordPress WP User Manager plugin <= 2.9.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.23.
CVE-2026-107423
Medium · 4.3
CWE-862 Oct 12, 2026
WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.22.
CVE-2026-103085
Medium · 6.5
CWE-284 Oct 5, 2026
WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability
Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a through 2.9.20.
CVE-2026-49766
Critical · 9.9
CWE-22 Jun 15, 2026
WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability
Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions.
CVE-2025-60245
Critical · 9.8
CWE-502 Nov 6, 2025
WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager: from n/a through <= 2.9.12.