Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-110527 1 Wordpress-extensions 1 Wp User Manager 2026-10-17 N/A
The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment step fails, allowing unauthenticated users to create functional accounts without completing payment.
CVE-2026-94079 2 Wordpress-extensions, Wpusermanager 2 Wp User Manager, Wp User Manager 2026-09-27 5.3 Medium
Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions.