WordPress Plugin Vulnerabilities

WP User Switch <= 1.1.3 - Subscriber+ Privilege Escalation

Description

The plugin is vulnerable to privilege escalation due to the plugin not properly validating a users permissions before allowing them to switch to another user. This makes it possible for unauthenticated attackers to gain access to higher privileged user accounts.

Affects Plugins

No known fix

References

Classification

Type
NO AUTHORISATION
CWE
CVSS

Miscellaneous

Original Researcher
thiennv
Verified
No

Timeline

Publicly Published
2024-07-09 (about 2 years ago)
Added
2024-07-15 (about 2 years ago)
Last Updated
2026-08-31 (about 20 days ago)

Other