Wpusermanager Wp User Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Wpusermanager Wp User Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-24655 — CVSS 7.5 (high): The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key…
• CVE-2024-10216 — CVSS 4.3 (medium): The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a…
• CVE-2024-10537 — CVSS 4.3 (medium): The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized access of data due to a…
• CVE-2024-43336 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in WP User Manager WP User Manager wp-user-manager.This issue affects WP User Manager: from…