Description
Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WP User Manager | WP User Manager | ≤ 2.9.19 | — |
Medium · 5.3
CVE-2026-94079
EUVD-2026-85469GHSA-94w8-whr9-9mv3
WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability
Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack