Radar sectionsPlugins & themes
Check my site

WordPress plugin

WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory security & vulnerabilities

wp-user-manager— active installsLast vulnerability Nov 11, 2026

No known unpatched vulnerabilities in the latest version

All 21 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

21Known vulnerabilities
  • Critical0
  • High6
  • Medium15
  • Low0
Vulnerabilities per year
2021: 2 vulnerabilities2212024: 3 vulnerabilities3242025: 2 vulnerabilities2252026: 14 vulnerabilities1426

All WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory vulnerabilities

Nothing in this view

No vulnerabilities match this filter. Show all.

WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory: common questions

Does WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory have known vulnerabilities?

Yes. VulnCrest Radar lists 21 known vulnerabilities in WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory: 6 high, 15 medium. None are known to affect version null.

How do I check which version of WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory vulnerability?

CVE-2026-124413, published Nov 11, 2026: WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory <= 2.10.4 - Missing Authorization. Severity: Medium (CVSS 5.3).

Is any WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory vulnerability listed in CISA KEV?

No. None of the known WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?