Deryck Onate vulnerabilities
We track 1 vulnerability in Deryck Onate products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Deryck Onate vulnerabilities
- 8.8 High severity
User Toolkit: Authentication Bypass Using an Alternate Path or Channel
The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. This is due to an improper capability check in the 'switchUser' function. This makes it possible for authenticated attackers, with subscriber-