WordPress Plugin Vulnerabilities

User Access Manager < 1.2 - CSRF

Description

The User Access Manager WordPress plugin was affected by a CSRF security vulnerability.

Affects Plugins

Plugin icon
user-access-manager
Fixed in 1.2

References

CVE
CVE-2011-5328

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
4c7582a3-b4ec-43fd-94dd-0a472c621c99

Timeline

Publicly Published
2011-06-19 (about 14 years ago)
Added
2019-08-26 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2020-11-19
Title
Contextual Related Posts < 2.9.4 - CSRF Nonce Validation Bypass
Published
2025-06-05
Title
Post Author <= 1.1.1 - Cross-Site Request Forgery
Published
2023-08-07
Title
Sign-up Sheets < 2.2.9 - Settings Update/Reset via CSRF
Published
2022-04-15
Title
Simple Ajax Chat < 20220216 - Log Clearing & Arbitrary Chat Message Deletion via CSRF
Published
2025-06-05
Title
Elite Video Player <= 10.0.5 - Cross-Site Request Forgery