Vulnerabilities / WP Plugin Manager
WP Plugin Manager vulnerabilities
Advisories WPSec published for WP Plugin Manager – Deactivate plugins per page. Other sources may list more. Its attack surface: WP Plugin Manager on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0508 | WP Plugin Manager <= 1.4.16 - Authenticated (Subscriber+) Missing Authorization to Plugin Status Disclosure via REST API | Medium 4.3 | 1.4.17 |
License: CC BY 4.0