Back to search
CVE-2022-4305
Published: Jan 23, 2023
Modified: Apr 3, 2025
PUBLISHED
Description
The Login as User or Customer WordPress plugin before 3.3 lacks authorization checks to ensure that users are allowed to log in as another one, which could allow unauthenticated attackers to obtain a valid admin session.
| Vendor | Product | Versions |
|---|---|---|
Unknown | Login as User or Customer | affected 0 - < 3.3 |
References
https://wpscan.com/vulnerability/286d972d-7bda-455c-a226-fd9ce5f925bd
exploit
vdb-entry
technical-description
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now