User Toolkit vulnerabilities

2 known vulnerabilities in User Toolkit from Deryck. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  User Toolkit: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-50503Oct 30, 2024Deryck

  Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck User Toolkit user-toolkit allows Authentication Bypass.This issue affects User Toolkit: from n/a through <= 1.2.3.

• 8.8 High severity

  User Toolkit: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-9890Oct 26, 2024DeryckEPSS 1.05%

  The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. This is due to an improper capability check in the 'switchUser' function. This makes it possible for authenticated attackers, with subscriber-