UNKNOWN NVD

CVE-2026-18035

The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to REST API requests, allowing unauthenticated attackers to read t

The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to REST API requests, allowing unauthenticated attackers to read the content of posts, pages and custom post types that have been restricted to specific user groups.

References

https://wpscan.com/vulnerability/9c5cae62-4c4c-434b-ae40-4654b257803f/

Published: 2026-08-12 · Source: NVD · Feed updated: 2026-08-12

This unknown severity vulnerability was published on 2026-08-12 via NVD.

vulnfeed aggregates 9910 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.