WordPress CVEs

Description

The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. This is due to an improper capability check in the 'switchUser' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator. CVE-2024-50503 may be a duplicate.

Affected WordPress components

• User Toolkit Plugin · user-toolkit
  Confirmed match Abandoned
  Up to and including 1.2.3
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• deryck User Toolkit — Up to and including 1.2.3
• deryck_onate user_toolkit — Up to and including 1.2.3

References

• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/user-toolkit/tags/1.2.3/src/UserSwitch.php#L51
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3175190/user-toolkit#file5
• www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/805f18e2-9a5a-48cf-81f4-825da4bfd8ef?source=cve
• nvd.nist.gov Official NVD record