WP User Manager vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WU

Product

WP User Manager

by WP User Manager · last CVE Oct 29, 2026

9

CVEs

0

On KEV

9.9

Max CVSS

5

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 2High 0Medium 7Low 0

Severity

All severities9 Critical2 High0 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WP User Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-103085	6.5	0%	Oct 5	WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability Affected: through 2.9.20
CVE-2026-116846 New	5.3	–	Oct 29	WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerability Affected: through 2.9.26
CVE-2026-108496	5.3	0%	Oct 13	WordPress WP User Manager plugin <= 2.9.24 - Broken Access Control vulnerability Affected: through 2.9.24
CVE-2026-94079	5.3	0%	Sep 23	WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability Affected: through 2.9.19
CVE-2026-112823	4.3	0%	Oct 20	WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerability Affected: through 2.9.25
CVE-2026-107423	4.3	0%	Oct 12	WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability Affected: through 2.9.22
CVE-2024-43336	4.3	0%	Aug 26	WordPress WP User Manager – User Profile Builder & Membership plugin <= 2.9.10 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 2.9.10