critical9.8
CVE-2026-115214
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a tr…
Impact
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator.
Affected products
| Product | Affected versions |
|---|---|
| Datawiza Proxy Auth Plugin WordPress Plugin | before 1.1.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.