cbcvebase.

Felixmartinez Users Manager Pn vulnerabilities

1 known vulnerability affecting felixmartinez/users_manager_pn.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-4003P2CRITICALCVSS 9.8≤ 1.1.152026-04-08
CVE-2026-4003 [CRITICAL] CWE-862 CVE-2026-4003: The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15. This is due to a flawed authorization logic check in the userspn_ajax_nopriv_server() function within the 'userspn_form_save' case. The conditional only blocks unauthenticated users when the use
nvd
Felixmartinez Users Manager Pn vulnerabilities | cvebase