Advanced Access Manager
Moderate fix1 remedy
cpe:2.3:a:advanced_access_manager_project:advanced_access_manager:*:*:*:*:wordpress:*:*
Moderate fix1 remedy
- <= 7.1.0
WordPress Advanced Access Manager Plugin Authentication Bypass Vulnerability
Vulnerability
Patched
An authentication bypass vulnerability has been identified in the WordPress Advanced Access Manager plugin, specifically in versions through 7.1.0. This vulnerability allows for URL encoding to be used to bypass authentication mechanisms within the plugin.
Impact
Exploiting this vulnerability could allow unauthorized users to bypass authentication, potentially leading to unauthorized access or actions within the application.
Remediation
Users of the WordPress Advanced Access Manager plugin should update to version 7.1.1 or later. Patchstack users can enable auto-updates for vulnerable plugins.
Added: Jun 1, 2026, 5:41 PM
Updated: Jun 1, 2026, 5:41 PM
Vulnerability Rating
Custom Algorithm
spread
5.2impact
5.0exploitability
7.6remediation
7.7relevance
9.7threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.