wp_user_manager_user_profile_builder_membership vulnerabilities

CVEs whose affected-version data names the wp_user_manager_user_profile_builder_membership package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-18345Medium· 4.3

yesterday

The WP User Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Connect::complete() function in versions up to, and including, 2.9.18

The WP User Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Connect::complete() function in versions up to, and including, 2.9.18. The function is registered on the…

▾ Sunlitwpusermanager · WP User Manager – User Profile Builder & Membershipvia NVD