CyberSecBulletin

Customer Switching vulnerabilities

We track 1 vulnerability in Customer Switching products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 30, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Customer Switching vulnerabilities

  • 7.5 High severity

    Customer Switching: Improper Authentication

    CVE-2026-15240Customer Switching

    The Customer Switching WordPress plugin before 2.1.3 does not securely bind an active user-switching session to the operator who initiated it, allowing a lower-privileged account that an operator is currently switched into to be resolved as that operator and t