plugin

Woocommerce User Switching Vulnerabilities

1 known security issue reported for the Woocommerce User Switching WordPress plugin. Most recent disclosed Jul 10, 2026.

1 high

Running Woocommerce User Switching on your site? Check whether your installed version is affected.

Scan your site free

Customer Switching < 2.1.3 - Authenticated (Customer+) Privilege Escalation

high

The Customer Switching for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to 2.1.3 (exclusive). This makes it possible for authenticated attackers, with customer-level access and above, to switch and access other user's accounts, including administrators.

CVSS:
8.8
Affected:
up to 2.1.3
Fixed in:
2.1.3
Disclosed:
Jul 10, 2026

CVE-2026-15240 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database