iBryl Switch User <= 1.0.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
highThe iBryl Switch User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.1. This is due to the plugin not properly verifying if a user has the appropriate permissions to switch as another user. This makes it possible for authenticated attackers, with subscriber-level ac...
- CVSS:
- 8.8
- Affected:
- up to 1.0.1
- Fix:
- No patched version reported
- Disclosed:
- Oct 21, 2024