File and Path Handling

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. WP User Manager – User Profile Builder & Membership - Local File InclusionCVE-2026-9290wpusermanager · CVSS 7.5 · 2.5% likely

   CWE-22

2. WP User Manager <= 2.9.12 - Authenticated (Subscriber+) Arbitrary File Deletion via 'current_user_avatar' ParameterCVE-2025-13320wpusermanager · CVSS 6.8 · 0.9% likely

   CWE-73

3. WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerabilityCVE-2026-49766WP User Manager · CVSS 9.9 · 0.5% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.