Unrated severityNVD Advisory· Published Aug 12, 2026

CVE-2026-18035

Description

The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to REST API requests, allowing unauthenticated attackers to read the content of posts, pages and custom post types that have been restricted to specific user groups.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/User Access Managerllm-fuzzy
Range: <2.3.15
Package: https://wordpress.org/plugins/user-access-manager

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/9c5cae62-4c4c-434b-ae40-4654b257803f/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000