Login Request a demo
WU
Product
WP User Manager
by WP User Manager · last CVE Oct 29, 2026
9
CVEs
0
On KEV
9.9
Max CVSS
5
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 0Medium 7Low 0
Severity
All severities9Critical2High0Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP User Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-49766
9.9
1%
Jun 15
WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability
Affected: through 2.9.16
CVE-2025-60245
9.8
1%
Nov 6
WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability
Affected: through 2.9.12
CVE-2026-103085
6.5
0%
Oct 5
WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability
Affected: through 2.9.20
CVE-2026-116846
New
5.3–Oct 29
WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerability
Affected: through 2.9.26
CVE-2026-108496
5.3
0%
Oct 13
WordPress WP User Manager plugin <= 2.9.24 - Broken Access Control vulnerability
Affected: through 2.9.24
CVE-2026-94079
5.3
0%
Sep 23
WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability
Affected: through 2.9.19
CVE-2026-112823
4.3
0%
Oct 20
WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerability
Affected: through 2.9.25
CVE-2026-107423
4.3
0%
Oct 12
WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability
Affected: through 2.9.22
CVE-2024-43336
4.3
0%
Aug 26
WordPress WP User Manager – User Profile Builder & Membership plugin <= 2.9.10 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 2.9.10
Showing 9