User Access Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:user_access_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | User Access Manager (3dba18a0-0549-5f16-9cd2-a4b0189de154) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18035 |
vulnerable | 2026-09-16 04:34:01.802416 |
User Access Manager < 2.3.15 - Unauthenticated Restricted Content Disclosure via REST API
The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to REST API requests, allowing unauthenticated attackers to read the content of posts, pages and custom post types that have been restricted to specific user groups.
Published: 2026-08-12T06:00:16.288Z
Updated: 2026-08-12T17:16:14.555Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1601 |
vulnerable | 2026-06-08 05:39:13.535915 |
User Access Manager < 2.2.18 - IP Spoofing
The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain situations.
Published: 2023-08-30T14:22:04.318Z
Updated: 2024-10-01T18:43:13.026Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.