https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10537.htmlhttps://patchthecve.com/cve/CVE-2024-10537.htmlWed, 17 Jun 2026 06:55:53 +0000MEDIUM 4.3: The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the validate_user_meta_key() function in all versions up to, and including, 2.9.11. This makes it possible for authenticated attackers, with https://patchthecve.com/cve/CVE-2024-10216.htmlhttps://patchthecve.com/cve/CVE-2024-10216.htmlWed, 17 Jun 2026 06:55:10 +0000MEDIUM 4.3: The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'add_sidebar' and 'remove_sidebar' functions in all versions up to, and including, 2.9.11. This makes it possible for authenticatedhttps://patchthecve.com/cve/CVE-2024-43336.htmlhttps://patchthecve.com/cve/CVE-2024-43336.htmlWed, 17 Jun 2026 07:50:49 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in WP User Manager WP User Manager wp-user-manager.This issue affects WP User Manager: from n/a through <= 2.9.10.