CVE-2024-43982 — WordPress Login As Users plugin <= 1.4.3 - Broken Access Control to Account Takeover vulnerability

CVE-2024-43982

WordPress Login As Users plugin <= 1.4.3 - Broken Access Control to Account Takeover vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in Geek Code Lab Login As Users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login As Users: from n/a through 1.4.3.

Affected (CNA)

Vendor / product	Versions
Geek Code Lab / Login As Users	affected n/a through 1.4.3

CWE

CWE-862

References

https://patchstack.com/database/vulnerability/login-as-users/wordpress-login-as-users-plugin-1-4-3-broken-access-control-to-account-takeover-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.