user-access-manager
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| User Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter | user-access-manager | WordPress | Medium | Fix reported | |
| User Access Manager <= 2.3.14 - Missing Authorization | user-access-manager | WordPress | Medium | Fix reported | |
| User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection | user-access-manager | WordPress | Medium | Fix reported | |
| User Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' Parameter | user-access-manager | WordPress | High | Fix reported | |
| User Access Manager <= 2.2.16 - IP Spoofing | user-access-manager | WordPress | Medium | Fix reported | |
| User Access Manager <= 2.0.8 - Reflected Cross-Site Scripting | user-access-manager | WordPress | Medium | Fix reported | |
| User Access Manager <= 1.2.14 - Reflected Cross-Site Scripting | user-access-manager | WordPress | Medium | Fix reported | |
| User Access Manager < 1.2 - Cross-Site Request Forgery | user-access-manager | WordPress | High | Fix reported |