Login Request a demo
AA
Product
Advanced Access Manager
by Vasyltech · last CVE Oct 16, 2024
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 3Medium 6Low 0
Severity
All severities9Critical0High3Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Advanced Access Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-35935
8.8
1%
Jan 1
The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aam_user_roles POST parameter if Multiple Role support is…
Affected: before 6.6.2
CVE-2019-25213
7.5
3%
Oct 16
Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read
Affected: through 5.9.8.1
CVE-2014-6059
7.2
3%
Jan 13
WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability
Affected: before 2.8.2
CVE-2024-29127
6.1
0%
Mar 19
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager allows Reflected XSS.This issue affects Advanced…
Affected: before 6.9.21
CVE-2023-51674
5.4
0%
Feb 1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced…
Affected: through 6.9.18
CVE-2023-51675
5.4
0%
Dec 29
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More.This issue affects…
Affected: before 6.9.19
CVE-2023-50881
5.4
0%
Dec 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced…
Affected: through 6.9.15
CVE-2021-24830
4.8
1%
Nov 23
The Advanced Access Manager WordPress plugin before 6.8.0 does not escape some of its settings when outputting them, allowing high privilege users to perform Cross-Site Scripting…
Affected: before 6.8.0
CVE-2020-35934
4.3
1%
Jan 1
The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via the REST API (aam/v1/authenticate or…
Affected: before 6.6.2
Showing 9