Deryck vulnerabilities
We track 2 vulnerabilities in Deryck products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2024.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Deryck vulnerabilities
- 9.8 Critical severity
User Toolkit: Authentication Bypass Using an Alternate Path or Channel
Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck User Toolkit user-toolkit allows Authentication Bypass.This issue affects User Toolkit: from n/a through <= 1.2.3.
- 8.8 High severity
User Toolkit: Authentication Bypass Using an Alternate Path or Channel
The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. This is due to an improper capability check in the 'switchUser' function. This makes it possible for authenticated attackers, with subscriber-