← CVE Intelligence

CVE-2022-4305

Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin PUBLISHED

Description (CNA)

The Login as User or Customer WordPress plugin before 3.3 lacks authorization checks to ensure that users are allowed to log in as another one, which could allow unauthenticated attackers to obtain a valid admin session.

Affected (CNA)

Vendor / productVersions
Unknown / Login as User or Customeraffected 0 before 3.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.