Advanced Access Manager – Access Governance for WordPress

Vulnerabilities 16Slug advanced-access-managerLatest version 7.1.1WordPress.org →

Minimum safe version

6.9.21

Update to 6.9.21 or later to address 16 fixable vulnerabilities

Latest available7.1.1 ✓
Critical 9.8
2024-10-16< 5.9.9

CVE-2019-25213

CVE
Medium 6.5
2024-12-26< 6.9.16

WordPress Advanced Access Manager Plugin <= 6.9.15 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
Medium 4.7
2024-12-27< 6.9.19

WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Open Redirection

PatchstackCVEWordfenceWPScan
Medium 6.5
2024-12-27< 6.9.19

WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
N/A
2016-06-21< 3.2.2

Advanced Access Manager <= 3.2.1 - Unrestricted AJAX Actions allowing Privilege Escalation

Wordfence
N/A
2019-09-09< 5.9.9

Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read

Wordfence
N/A
< 3.2.2

Advanced Access Manager &lt;= 3.2.1 - Privilege Escalation

WPScan
N/A
< 5.9.9

Advanced Access Manager &lt; 5.9.9 - Unauthenticated Local File Inclusion

WPScan
N/A
2016-06-21< 3.2.2

WordPress Advanced Access Manager Plugin <= 3.3 - Unrestricted File Upload

Patchstack
N/A
2019-09-09< 5.9.9

WordPress Advanced Access Manager plugin <= 5.9.8.1 - Arbitrary File Access/Download vulnerability

Patchstack