[■] Plugin de WordPress

WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

21 expedientes en el radar

Comprueba tu versión de WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory Sólo las que se están explotando

[■] Registro

Vulnerabilidades (21)

5,3 Media

CVE-2026-124413: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-124413

T−3d 11 nov. 2026
5,3 Media

CVE-2026-121575: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-121575

T−7d 7 nov. 2026
6,4 Media

CVE-2026-120550: cross-site scripting (XSS) en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-120550

T−8d 5 nov. 2026
5,3 Media

CVE-2026-116846: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-116846

T−15d 29 oct. 2026
4,3 Media

CVE-2026-112823: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-112823

T−24d 20 oct. 2026
7,3 Alta

CVE-2026-110523: gestión incorrecta de privilegios en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-110523

T−26d 19 oct. 2026
5,3 Media

CVE-2026-110527: vulnerabilidad en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-110527

T−30d 15 oct. 2026
5,3 Media

CVE-2026-108496: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-108496

T−32d 13 oct. 2026
4,3 Media

CVE-2026-107423: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-107423

T−33d 12 oct. 2026
7,3 Alta

CVE-2026-103085: gestión incorrecta de privilegios en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-103085

T−41d 3 oct. 2026
5,3 Media

CVE-2026-94079: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-94079

T−53d 22 sept. 2026
4,3 Media

CVE-2026-18345: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-18345

T−53d 21 sept. 2026
8,1 Alta

CVE-2026-49766: recorrido de rutas (path traversal) en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-49766

T−162d 5 jun. 2026
7,5 Alta

CVE-2026-9290: recorrido de rutas (path traversal) en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2026-9290

T−162d 5 jun. 2026
6,8 Media

CVE-2025-13320: vulnerabilidad en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2025-13320

T−337d 11 dic. 2025
7,5 Alta

CVE-2025-60245: deserialización de datos no fiables en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2025-60245

T−544d 19 may. 2025
4,3 Media

CVE-2024-10216: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2024-10216

T−721d 22 nov. 2024
4,3 Media

CVE-2024-10537: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2024-10537

T−722d 22 nov. 2024
4,3 Media

CVE-2024-43336: falsificación de peticiones (CSRF) en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2024-43336

T−820d 16 ago. 2024
7,5 Alta

CVE-2021-24655: acceso a datos de otros usuarios (IDOR) en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2021-24655

T−1879d 22 sept. 2021
5,4 Media

CVE-2021-24654: cross-site scripting (XSS) en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

CVE-2021-24654

T−1895d 6 sept. 2021