CVE-2026-12097

The User Management plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to modify the plugin's...

CVE-2026-12097

The CVE covers the WordPress User Management plugin (versions up to and including 1.2). Affected component: the plugin’s authorization flow; root cause is improper verification of a user’s permission, enabling an authorization bypass. Impact: unauthenticated attackers can modify the plugin’s expo...

PT-2019-13077

Name of the Vulnerable Software and Affected Versions Mendix versions 7.23.5 and earlier Description The issue in XML import mappings allows DOCTYPE declarations in the XML input that is potentially unsafe. This could lead to unsafe processing of XML data. Recommendations For Mendix versions 7.23...

CVE-2019-12996: Server-Side Request Forgery (SSRF)

In Mendix 7.23.5 and earlier, issue in XML import mappings allow DOCTYPE declarations in the XML input that is potentially unsafe...