WordPress security by component
Datawiza Proxy Auth Plugin
Datawiza Proxy Auth Plugin (reverse-proxy-auth-widget) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 25, 2026; an upstream CVSS base score is still pending.
Plugin slug:
reverse-proxy-auth-widgetSafe-version coverage
100%
1 of 1 published CVE include confirmed safe-version guidance.
Last checked .
This measures remediation-data coverage in this archive. It is not a claim that the plugin is vulnerability-free or insecure.
Latest vulnerability
CVE-2026-115214: Datawiza Proxy Auth: Untrusted identity headers permit administrator login
Datawiza Proxy Auth trusts user-identity and role HTTP headers without verifying that a trusted reverse proxy supplied them. An unauthenticated attacker whose headers reach that trust path can create and authenticate as a WordPress administrator. The exact header names, authentication route and proxy configuration are not disclosed in the export. Published affected versions: 1.1.0 to < 1.1.1.
| Safe version |
|
||
|---|---|---|---|
| Oct 25, 2026 |
CVE-2026-115214
Datawiza Proxy Auth: Untrusted identity headers permit administrator login
Datawiza Proxy Auth trusts user-identity and role HTTP headers without verifying that a trusted reverse proxy supplied them. An unauthenticated attacker whose headers reach that trust path can create and authenticate as a WordPress administrator. The exact header names, authentication route and proxy configuration are not disclosed in the export. Published affected versions: 1.1.0 to < 1.1.1.
|
1.1.1 |
CVEPending
|