CVE-2026-18352

Name of the Vulnerable Software and Affected Versions User Access Manager versions prior to 2.3.16

Description The User Access Manager plugin for WordPress contains a Directory Traversal flaw. This issue allows unauthenticated attackers to read arbitrary files on the server, potentially exposing sensitive information. The flaw occurs because when the attachment url to postid() function returns 0 for a traversal path, the plugin relies on a global post established by a valid attachment id parameter. This causes the access check to validate against a legitimate public attachment while the system streams the file from the path specified by the attacker via the uamgetfile parameter.

Recommendations Update the plugin to version 2.3.16 or later. Avoid using the uamgetfile parameter until the update is applied.