WordPress security by component
Login as User or Customer (User Switching)
Plugin description
Login as User or Customer (User Switching) allows authorized administrators to switch into another WordPress user account.
Login as User or Customer (User Switching) (login-as-customer-or-user) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Apr 25, 2024; the highest published CVSS base score is 9.8.
Plugin slug:
login-as-customer-or-userLatest vulnerability
CVE-2023-51484: Login as User or Customer (User Switching): Privilege escalation or authentication bypass
Login as User or Customer (User Switching) is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
| Safe version |
|
||
|---|---|---|---|
| Apr 25, 2024 |
CVE-2023-51484
Login as User or Customer (User Switching): Privilege escalation or authentication bypass
Login as User or Customer (User Switching) is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
|