Description
WordPress Plugin WP User Switch is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently log in as any existing user on the site, including administrator, if they have access to the username. WordPress Plugin WP User Switch version 1.0.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.3 or latest
References
Related Vulnerabilities
ColdFusion 8 FCKEditor file upload vulnerability
PHP Resource Management Errors Vulnerability (CVE-2012-0830)
WordPress Plugin Answer My Question Cross-Site Scripting (1.3)
WordPress Plugin Download Shortcode Arbitrary File Disclosure (0.1)
WordPress Plugin File Manager Advanced Shortcode Arbitrary File Upload (2.5.3)