corpus.blog
42,060 blogs · 5,214,511 posts Claim your blog
Record · corpus.blog/posts/01a08784-d603-701f-a921-4042ca08491a

CVE-2026-9290: WP User Manager Unauthenticated Path Traversal to LFI (CVSS 7.5)

hurayraiit.com · published 20 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hurayraiit.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
12
Words captured
1,527

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://wordpress.org/plugins/wp-user-manager/
wordpress.org
https://www.cve.org/CVERecord?id=CVE-2026-9290
cve.org
https://downloads.wordpress.org/plugin/wp-user-manager.2.9.17.zip
downloads.wordpress.org
https://downloads.wordpress.org/plugin/wp-user-manager.2.9.18.zip
downloads.wordpress.org
https://www.wordfence.com/threat-intel/vulnerabilities/researchers/yat-wu
wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-user-manager/wp-user-manager-2917-unauthenticated-path-traversal-to-local-file-inclusion-via-tab-query-parameter
wordfence.com
https://plugins.trac.wordpress.org/browser/wp-user-manager/tags/2.9.17/templates/profile.php
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/wp-user-manager/tags/2.9.17/includes/functions.php
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/wp-user-manager/tags/2.9.17/vendor-dist/gamajo/template-loader/class-gamajo-template-loader.php
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/wp-user-manager/tags/2.9.17/vendor-dist/brain/cortex/src/Cortex/Router/Router.php
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3554574%40wp-user-manager&new=3554574%40wp-user-manager&sfp_email=&sfph_mail=
plugins.trac.wordpress.org
https://github.com/WPUserManager/wp-user-manager/pull/445
github.com