Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-4305

Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Login as User or Customer WordPress plugin before 3.3 lacks authorization checks to ensure that users are allowed to log in as another one, which could allow unauthenticated attackers to obtain a valid admin session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Login as User or Customer

Default version status: unaffected

  • 0 to < 3.3affected

References