Login as User – Switch User & WooCommerce Login as Customer vulnerabilities
1 known vulnerability in Login as User – Switch User & WooCommerce Login as Customer from Royalnavneet. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
Login as User – Switch User & WooCommerce…: Authorization Bypass Through User-Controlled Key
The Login as User plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the handle_return_to_admin() function trusting a client-controlled cookie (oclaup_original_admin) to determine which user t