Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-18035 2 User Access Manager Project, Wordpress 2 User Access Manager, Wordpress 2026-08-13 5.3 Medium
The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to REST API requests, allowing unauthenticated attackers to read the content of posts, pages and custom post types that have been restricted to specific user groups.
CVE-2011-5328 1 User Access Manager Project 1 User Access Manager 2024-11-21 N/A
The user-access-manager plugin before 1.2 for WordPress has CSRF.