WordPress plugin
WPAMS - Apartment Management System for wordpress security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High4
- Medium3
- Low0
All WPAMS - Apartment Management System for wordpress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Apartment Management System for wordpress < 49.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion <49.5.3Update to 49.5.3 | CVE-2026-39433 | |
| Critical9.8 | Unauthenticated Arbitrary File Upload ≤44.0 (17-08-2023)No patch available | CVE-2025-39401 | |
| Medium6.1 | Unauthenticated Stored Cross-Site Scripting ≤44.0 (17-08-2023)No patch available | CVE-2025-39392 | |
| Medium6.5 | Authenticated (Subscriber+) SQL Injection ≤44.0 (17-08-2023)No patch available | CVE-2025-39403 | |
| High7.5 | Unauthenticated SQL Injection ≤44.0 (17-08-2023)No patch available | CVE-2025-39395 | |
| High8.8 | Authenticated (Subscriber+) Privilege Escalation ≤44.0 (17-08-2023)No patch available | CVE-2025-39405 | |
| High8.8 | Authenticated (Subscriber+) Arbitrary File Upload ≤44.0 (17-08-2023)No patch available | CVE-2025-39402 | |
| Critical9.8 | Unauthenticated Local File Inclusion ≤44.0 (17-08-2023)No patch available | CVE-2025-39406 | |
| High8.8 | Apartment Management System for wordpress Theme < 17-07-2019 - SQL Injection <17-07-2019Update to 17-07-2019 | CVE-2017-14847 |
- Medium4.3Apartment Management System for wordpress < 49.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
<49.5.3Update to 49.5.3
- Critical9.8Unauthenticated Arbitrary File Upload
≤44.0 (17-08-2023)No patch available
- Medium6.1Unauthenticated Stored Cross-Site Scripting
≤44.0 (17-08-2023)No patch available
- Medium6.5Authenticated (Subscriber+) SQL Injection
≤44.0 (17-08-2023)No patch available
- High7.5Unauthenticated SQL Injection
≤44.0 (17-08-2023)No patch available
- High8.8Authenticated (Subscriber+) Privilege Escalation
≤44.0 (17-08-2023)No patch available
- High8.8Authenticated (Subscriber+) Arbitrary File Upload
≤44.0 (17-08-2023)No patch available
- Critical9.8Unauthenticated Local File Inclusion
≤44.0 (17-08-2023)No patch available
- High8.8Apartment Management System for wordpress Theme < 17-07-2019 - SQL Injection
<17-07-2019Update to 17-07-2019
WPAMS - Apartment Management System for wordpress: common questions
Does WPAMS - Apartment Management System for wordpress have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in WPAMS - Apartment Management System for wordpress: 2 critical, 4 high, 3 medium. At least one is not fixed in the latest version.
How do I check which version of WPAMS - Apartment Management System for wordpress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WPAMS - Apartment Management System for wordpress vulnerability?
CVE-2026-39433, published Apr 7, 2026: WPAMS - Apartment Management System for wordpress < 49.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion. Severity: Medium (CVSS 4.3).
Is any WPAMS - Apartment Management System for wordpress vulnerability listed in CISA KEV?
No. None of the known WPAMS - Apartment Management System for wordpress vulnerabilities is currently listed in the CISA KEV catalog.