Skip to content
OpenAdvisories

Vendor

WP User Manager

11 known vulnerabilities.

Products

WP User Manager 11
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-124413

    WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.10.4.

    WP User Manager WP User Manager
  • Medium 5.3
    CVE-2026-121575

    WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.10.4.

    WP User Manager WP User Manager
  • Medium 5.3
    CVE-2026-116846

    WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.26.

    WP User Manager WP User Manager
  • Medium 4.3
    CVE-2026-112823

    WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Manipulating User State.This issue affects WP User Manager: from n/a through 2.9.25.

    WP User Manager WP User Manager
  • Medium 5.3
    CVE-2026-108496

    WordPress WP User Manager plugin <= 2.9.24 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.24.

    WP User Manager WP User Manager
  • Medium 4.3
    CVE-2026-107423

    WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.22.

    WP User Manager WP User Manager
  • Medium 6.5
    CVE-2026-103085

    WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability

    Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a through 2.9.20.

    WP User Manager WP User Manager
  • Medium 5.3
    CVE-2026-94079

    WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions.

    WP User Manager WP User Manager
  • Medium 4.3
    CVE-2024-43336

    WordPress WP User Manager – User Profile Builder & Membership plugin <= 2.9.10 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WP User Manager WP User Manager wp-user-manager.This issue affects WP User Manager: from n/a through <= 2.9.10.

    WP User Manager WP User Manager