plugin
3 known security issues reported for the Authorizer WordPress plugin. Most recent disclosed Oct 1, 2026.
Running Authorizer on your site? Check whether your installed version is affected.
Scan your site freeThe Authorizer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.15.3. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for unauthenticated attackers to elevate their privileges beyond those intended for thei...
The Authorizer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.15.1. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for unauthenticated attackers to elevate their privileges beyond those intended for thei...
The phpCAS library uses HTTP headers to determine the service URL used to validate tickets. This allows an attacker to control the host header and use a valid ticket granted for any authorized service in the same SSO realm (CAS server) to authenticate to the service protected by phpCAS. Depending on the settings of the...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free