Lucene search
+L
Wp-buyLogin As User Or Customer (user Switching)

3 matches found

CVE
CVE
added 2023/01/23 2:31 p.m.82 views

CVE-2022-4305

The CVE-2022-4305 entry concerns the WordPress plugin “Login as User or Customer” before version 3.3, which lacks proper authorization checks to prevent logging in as another user. This can allow unauthenticated attackers to obtain a valid admin session, potentially leading to full site compromis...

9.8CVSS9.4AI score0.38625EPSS
SaveWeb
CVE
CVE
added 2024/03/11 5:56 p.m.72 views

CVE-2023-7247

CVE-2023-7247 affects the Login as User or Customer WordPress plugin (

4.9CVSS6AI score0.00636EPSS
SaveWeb
CVE
CVE
added 2021/05/14 11:38 a.m.56 views

CVE-2021-24195

CVE-2021-24195 affects the WordPress plugin Login as User or Customer (User Switching) prior to 1.9. A low-privilege user can call the AJAX action cp_plugins_do_button_job_later_callback to install any plugin (including a specific version) from the WordPress repository and activate arbitrary plug...

8.8CVSS8.8AI score0.01325EPSS
Save