Vulnerabilities / WP User Merger
WP User Merger vulnerabilities
Advisories WPSec published for WP User Merger. Other sources may list more. Its attack surface: WP User Merger on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2377 | WP User Merger <= 1.6.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name | Medium 5.4 | 1.6.6 |
License: CC BY 4.0