CVE-2026-115214

The Datawiza Proxy Auth Plugin for WordPress, in versions before 1.1.1 , is vulnerable to unauthenticated privilege escalation. The plugin fails to verify that the user-identity and role HTTP request headers it trusts actually originate from a trusted reverse proxy. This flaw allows an unauthenti...

EUVD-2026-109352

The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator...