Description
Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WP User Manager | WP User Manager | ≤ 2.9.16 | — |
Critical · 9.9
CVE-2026-49766
EUVD-2026-36890GHSA-hv55-m54h-w5pj
WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack