Threats tagged 'ghsa-xh5g-6mjw-q8f4'

A missing authorization vulnerability exists in WP User Manager up to version 2.9.26. This flaw allows unauthorized users to exploit incorrectly configured access control security levels, potentially leading to unauthorized information disclosure. The vulnerability has a CVSS score of 5.3, indicating a medium severity impact with low complexity and no required privileges or user interaction.