User Rights Access Manager vulnerabilities
We track 1 vulnerability in User Rights Access Manager products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest User Rights Access Manager vulnerabilities
- 9.8 Critical severity
User Rights Access Manager: Improper Privilege Management
The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registration handlers and assigns newly registered accounts a role that was created as a copy of the administrator role, allowing unauthenticated