Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin
75Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 9.8epss 39%
exploitation probability
39%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The Login as User or Customer WordPress plugin before 3.3 lacks authorization checks to ensure that users are allowed to log in as another one, which could allow unauthenticated attackers to obtain a valid admin session.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Unknown · Login as User or Customerpublic PoCs found — 1
cve_referencewpscan.com/vulnerability/286d972d-7bda-455c-a226-fd9ce5f925bdunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.