CVE-2026-18345 | WP User Manager Plugin up to 2.9.18 on WordPress Connect Connect::complete privileges management

A vulnerability was found in WP User Manager Plugin up to 2.9.18 on WordPress and classified as problematic. The affected element is the function Connect::complete of the component Connect. Executing a manipulation can lead to improper privilege management.

This vulnerability is registered as CVE-2026-18345. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More