Description
WordPress Plugin WP User Switch is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently log in as any existing user on the site, including administrator, if they have access to the username. WordPress Plugin WP User Switch version 1.0.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.3 or latest
References
Related Vulnerabilities
WordPress Plugin Collapse-O-Matic Cross-Site Scripting (1.6.8)
WordPress Plugin Locations Cross-Site Request Forgery (3.2.1)
WordPress 4.3.x Same Origin Method Execution (SOME) Vulnerability (4.3 - 4.3.3)
MySQL CVE-2020-14812 Vulnerability (CVE-2020-14812)
Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability (CVE-2022-21655)