Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

WordPress Plugin 'WP User Manager' Allows Unauthenticated Access

CVE-2026-27529
Summary

A security weakness in the 'WP User Manager' plugin for WordPress allows unauthorized users to access and manage other users' information. This could enable hackers to view and modify sensitive data. To protect your website, update the plugin to the latest version.

Original title
Rejected reason: Not used
Original description
Rejected reason: Not used
Published: 21 Feb 2026 · Updated: 12 Mar 2026 · First seen: 6 Mar 2026