CVE-2026-15240

The CVE concerns the Customer Switching WordPress plugin prior to 2.1.3. It states that the plugin does not securely bind an active user-switching session to the operator who initiated it, enabling a lower-privileged account that an operator is currently switched into to be resolved as that opera...