Description
WordPress Plugin WP User Switch is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently log in as any existing user on the site, including administrator, if they have access to the username. WordPress Plugin WP User Switch version 1.0.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.3 or latest
References
Related Vulnerabilities
Oracle Database Server CVE-2020-2968 Vulnerability (CVE-2020-2968)
WordPress Plugin AMP for WP-Accelerated Mobile Pages Multiple Unspecified Vulnerabilities (0.9.72)
WordPress Plugin GA Universal Cross-Site Request Forgery (1.0)
WordPress Plugin Ldap WP Login/Active Directory Integration Multiple Vulnerabilities (3.0.1)