plugin
2 known security issues reported for the User Toolkit WordPress plugin. Most recent disclosed Oct 28, 2025.
Running User Toolkit on your site? Check whether your installed version is affected.
Scan your site freeThe User Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. This is due to an improper capability check in the 'switchUser' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free