Skip to content
OpenAdvisories

Vendor

WP User Manager

17 known vulnerabilities.

Products

WP User Manager 11 WP User Manager – User Profile Builder & Membership 5 WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-49766

    WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability

    Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions.

    WP User Manager WP User Manager
  • Critical 9.8
    CVE-2025-60245

    WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager: from n/a through <= 2.9.12.

    WP User Manager WP User Manager