blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2023-7247

MEDIUM 4.9 CVSS 3.1
Published
March 11, 2024
Last modified
June 17, 2026
NVD status
Analyzed
Reported by
contact@wpscan.com
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.

Affected products and versions

  • Unknown Login as User or Customer — Up to and including 3.8
  • wp-buy login_as_user_or_customer_\(user_switching\) — Up to and including 3.8

References

  • drive.google.com https://drive.google.com/file/d/1GCOzJ-ZovYij9GIdmsrZrR9g8mlC22hs/view?usp=sharing Exploit
  • wpscan.com https://wpscan.com/vulnerability/96b93253-31d0-4184-94b7-f1e18355d841/ Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record