WP User Manager

Products

ProductCVEsExploitedLatest
WP User Manager9–Oct 29, 2026

Exploited and recent CVEs

  • CVE-2026-116846 Medium 5.3 WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerability 0.3%
  • CVE-2026-112823 Medium 4.3 WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerability 0.2%
  • CVE-2026-108496 Medium 5.3 WordPress WP User Manager plugin <= 2.9.24 - Broken Access Control vulnerability 0.2%
  • CVE-2026-107423 Medium 4.3 WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability 0.2%
  • CVE-2026-103085 Medium 6.5 WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability 0.2%
  • CVE-2026-94079 Medium 5.3 WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability 0.3%
  • CVE-2026-49766 Critical 9.9 WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2025-60245 Critical 9.8 WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability 0.5%
  • CVE-2024-43336 Medium 4.3 WordPress WP User Manager – User Profile Builder & Membership plugin <= 2.9.10 - Cross Site Request Forgery (CSRF) vulnerability 0.2%