Directory Traversal Vulnerability in User Access Manager Plugin for WordPress

CVE-2026-18352

What is CVE-2026-18352?

The User Access Manager plugin for WordPress is susceptible to a Directory Traversal vulnerability that affects all versions up to and including 2.3.15. This flaw allows unauthenticated attackers to gain unauthorized access to arbitrary files on the server by exploiting the 'uamgetfile' parameter. When an invalid attachment path is provided, the plugin defaults to a public attachment identified by a legitimate ?attachment_id supplied by the attacker. This bypasses the intended access checks, enabling sensitive file contents to be disclosed. Organizations using this plugin should prioritize updating to a secure version to mitigate risks associated with this vulnerability.

References