WordPress WP User Manager plugin 2.9-2.9.19 - Unauthenticated Account Creation vulnerability

Unauthenticated Account Creation vulnerability discovered by Sanjorn Keeratirungsan in WordPress Plugin WP User Manager versions 2.9-2.9.19...

WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Pedro Delgado in WordPress Plugin WP User Manager versions = 2.9.20...

WordPress WP User Manager Plugin <= 2.9.11 is vulnerable to Broken Access Control

Software WP User Manager Type Plugin Vulnerable versions = 2.9.11 Fixed in 2.9.12 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10537 Patch priority Low CVSS severity Low 4.3 Developer WP User Manager PSID 15d82a7ba59b Credits Tieu Pham Trong Nhan Requir...

WordPress WP User Manager Plugin <= 2.9.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP User Manager Type Plugin Vulnerable versions = 2.9.10 Fixed in 2.9.11 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-43336 Patch priority Low CVSS severity Low 4.3 Developer WP User Manager PSID 6918353ae071 Credits Ananda Dhakal Patchstac...