CVE-2026-115214

The Datawiza Proxy Auth Plugin for WordPress, in versions before 1.1.1 , is vulnerable to unauthenticated privilege escalation. The plugin fails to verify that the user-identity and role HTTP request headers it trusts actually originate from a trusted reverse proxy. This flaw allows an unauthenti...