Gm Alex vulnerabilities
We track 1 vulnerability in Gm Alex products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 2, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Gm Alex vulnerabilities
- 7.5 High severity
User Access Manager: Improper Limitation of a Pathname to a Restricted Directory
The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary file