High · 7.5 CVE-2026-42674 EUVD-2026-33689GHSA-7jmm-rc72-mcgf

WordPress Advanced Access Manager plugin <= 7.1.0 - Bypass Vulnerability vulnerability

Published Jun 1, 2026 · Updated Jun 1, 2026 · Assigned by Patchstack

Description

Authentication Bypass by Spoofing vulnerability in AAM Plugin Advanced Access Manager allows URL Encoding.

This issue affects Advanced Access Manager: from n/a through 7.1.0.

Vendor	Product	Affected	Fixed
AAM Plugin	Advanced Access Manager	≤ 7.1.0	—