CVE-2026-94079

Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions.

Published Sep 23, 2026
CVSS 5.3 medium
0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

WP User Manager

CVE-2026-94079 at the National Vulnerability Database