Plugin icon

User Access Manager

user-access-manager

Vulnerabilities:

7

Last Updated:

September 10, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-08
Title
User Access Manager < 2.3.19 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter
Fixed in
Fixed in 2.3.19
CVSS
6.1 (medium)
Published
2026-08-10
Title
User Access Manager < 2.3.15 - Unauthenticated Restricted Content Disclosure via REST API
Fixed in
Fixed in 2.3.15
CVSS
5.3 (medium)
Published
2026-08-04
Title
User Access Manager < 2.3.13 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 2.3.13
CVSS
6.5 (medium)
Published
2026-08-01
Title
User Access Manager < 2.3.16 - Unauthenticated Arbitrary File Read via 'uamgetfile' Parameter
Fixed in
Fixed in 2.3.16
CVSS
7.5 (high)
Published
2023-08-04
Title
User Access Manager < 2.2.18 - IP Spoofing
Fixed in
Fixed in 2.2.18
CVSS
3.7 (low)
Published
2017-05-11
Title
User Access Manager <= 2.0.8 - Authenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.0.9
CVSS
n/a
Published
2011-06-19
Title
User Access Manager < 1.2 - CSRF
Fixed in
Fixed in 1.2
CVSS
8.8 (high)