User Access Manager

user-access-manager · plugin

Known security vulnerabilities for User Access Manager. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

latest Sep 9, 2026

Vulnerabilities

CVE-2011-5328
The user-access-manager plugin before 1.2 for WordPress has CSRF.
High 8.8
CVE-2026-18352
User Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' Parameter
High 7.5
CVE-2026-15281
User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection
Medium 6.5
CVE-2026-19797
User Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter
Medium 6.1