WordPress Login as User or Customer (User Switching) Plugin <= 3.8 is vulnerable to Privilege Escalation
Low priority No impactful threat
<= 3.8Vulnerable version(s)
No official fix availableFixed version
27 Dec, 2023
Get the fastest vulnerability mitigation with Patchstack!
Get startedRisks
CVSS 9.89.8
Privilege Escalation
This could allow a malicious actor to escalate their low privileged account to something with higher privileges. After this they could take full control of the website if high privileges are gained.
CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.
Solutions
This security issue has a low severity impact and is unlikely to be exploited.
Details
Have additional information or questions about this entry? Let us know.
Timeline
27 Dec, 2023