AAM Plugin vulnerabilities

Products

• Advanced Access Manager 1

Latest AAM Plugin CVEs

Newest publication first

1. CVE-2026-42674 WordPress Advanced Access Manager plugin <= 7.1.0 - Bypass Vulnerability vulnerability

   Published 2026-06-01

   High·CVSS 7.5 EPSS 0.39%

   Authentication Bypass by Spoofing vulnerability in AAM Plugin Advanced Access Manager allows URL Encoding. This issue affects Advanced Access Manager: from n/a through 7.1.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.