VendorsWP User Managerwp_user_managerany version
Vulnerabilities

WP User Manager Wp User Manager any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2021-24655
WP User Manager < 2.6.3 - Arbitrary User Password Reset to Account Compromise
Published 2022-07-17 · Modified
7.5EPSS 0.010
CVE-2024-10216
WP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Carbon Fields Custom Sidebar Addition/Removal
Published 2024-11-23 · Analyzed
4.3EPSS 0.004
CVE-2024-10537
WP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Authenticated (Subscriber+) User Meta Key Enumeration
Published 2024-11-23 · Analyzed
4.3EPSS 0.004
CVE-2024-43336
WordPress WP User Manager – User Profile Builder & Membership plugin <= 2.9.10 - Cross Site Request Forgery (CSRF) vulnerability
Published 2024-08-26 · Modified
4.3EPSS 0.002