Wpusermanager Wp User Manager – User Profile Builder & Membership vulnerabilities
- wpusermanager wp user manager – user profile builder & membershipWP User Manager <= 2.9.18 - Missing Authorization to Authenticated (Subscriber+) Stripe Account Hijack via Stripe Connect Callback4.3 Medium
- wpusermanager wp user manager – user profile builder & membershipWP User Manager <= 2.9.17 - Unauthenticated Path Traversal to Local File Inclusion via 'tab' Query Parameter7.5 High
- wpusermanager wp user manager – user profile builder & membershipWP User Manager <= 2.9.12 - Authenticated (Subscriber+) Arbitrary File Deletion via 'current_user_avatar' Parameter6.8 Medium
- wpusermanager wp user manager – user profile builder & membership, wp user manager +1 moreWP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Authenticated (Subscriber+) User Meta Key Enumeration4.3 Medium
- wpusermanager wp user manager – user profile builder & membership, wp user manager +1 moreWP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Carbon Fields Custom Sidebar Addition/Removal4.3 Medium
- wpusermanager wp user manager, unknown wp user manager – user profile builder & membership +1 moreWP User Manager < 2.6.3 - Arbitrary User Password Reset to Account Compromise7.5 High