Skip to contentWp User Manager User Manager vulnerabilities
- wp user manager user managerWordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerabilityCVE-2026-1244135.3 Medium
- wp user manager user managerWordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerabilityCVE-2026-1215755.3 Medium
- wp user manager user managerWordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerabilityCVE-2026-1168465.3 Medium
- unknown wp user manager, wp user manager user manager +1 moreWP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe DisconnectCVE-2026-1105238.1 High
- wp user manager user managerWordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerabilityCVE-2026-1128234.3 Medium
- unknown wp user manager, wp user manager user manager +1 moreWP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment BypassCVE-2026-1105275.3 Medium
- wp user manager user managerWordPress WP User Manager plugin <= 2.9.24 - Broken Access Control vulnerabilityCVE-2026-1084965.3 Medium
- wp user manager user managerWordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerabilityCVE-2026-1074234.3 Medium
- wp user manager user managerWordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerabilityCVE-2026-1030856.5 Medium
- wp user manager user managerWordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerabilityCVE-2026-940795.3 Medium
- wp user manager user managerWordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerabilityCVE-2026-497669.9 Critical
- wp user manager user managerWordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerabilityCVE-2025-602459.8 Critical
- wp user manager user manager, wpusermanager wp user manager +1 moreWordPress WP User Manager – User Profile Builder & Membership plugin <= 2.9.10 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-433364.3 Medium