CVE-2026-49766

WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability

CVSS 9.9 CRITICALEPSS 0.5%CWE-22

Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Produtos afetados

WP User Manager · WP User Manager

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://patchstack.com/database/wordpress/plugin/wp-user-manager/vulnerability/wordpress-wp-user-manager-plugin-2-9-16-arbitrary-file-deletion-vulnerability?_s_id=cve