Description
WordPress Plugin WP User Switch is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently log in as any existing user on the site, including administrator, if they have access to the username. WordPress Plugin WP User Switch version 1.0.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.3 or latest
References
Related Vulnerabilities
YetiForce CRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-1411)
WordPress Plugin Centrora Security Multiple Vulnerabilities (6.5.6)
WordPress Plugin Watu Quiz Unspecified Vulnerability (2.6)
MySQL CVE-2014-2434 Vulnerability (CVE-2014-2434)
WordPress Plugin Calendar Event Multi View Unspecified Vulnerability (1.3.58)