medium4.9
CVE-2023-7247
The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.
Impact
The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wp-Buy | Login As User Or Customer \(User Switching\) | through 3.8 |
References
- NVD record
- CVE.org record
- https://drive.google.com/file/d/1GCOzJ-ZovYij9GIdmsrZrR9g8mlC22hs/view?usp=sharing
- https://wpscan.com/vulnerability/96b93253-31d0-4184-94b7-f1e18355d841/
- https://drive.google.com/file/d/1GCOzJ-ZovYij9GIdmsrZrR9g8mlC22hs/view?usp=sharing
- https://wpscan.com/vulnerability/96b93253-31d0-4184-94b7-f1e18355d841/