← Back to browse · API

CVE-2026-49766

Severity
CRITICAL
CVSS
9.9
EPSS
0.00506
Risk score
39.78
CISA KEV
No
PoC
No
Published
2026-06-15
Modified
2026-06-16
First seen
2026-08-07
Aliases
EUVD-2026-36890, GHSA-HV55-M54H-W5PJ
Products
WP User Manager:WP User Manager n/a ≤2.9.16
Sources
euvd EUVD-2026-36890

Description

Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions.

References