CVE-2011-5328

HighCVSS 8.8/10Last modified Jun 16, 2026

Description

The user-access-manager plugin before 1.2 for WordPress has CSRF.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Aug 20, 2019
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-53296.1The redirection plugin before 2.2.9 for WordPress has XSS in the admin menu, a different issue than CVE-2011-4562.CVE-2011-53309.8Distributed Ruby (aka DRuby) 1.8 mishandles the sending of syscalls.CVE-2011-53319.8Distributed Ruby (aka DRuby) 1.8 mishandles instance_eval.
CVE-2011-5328: High severity, CVSS 8.8 | Vulnix