CVE-2023-7247

Login as User or Customer <= 3.8 - Admin Account Takeover

The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.

Affected

Login as User or Customer

CVSS v3.1 CNA

4.9 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

0.64% chance of exploitation in the next 30 days, 50th percentile

Published

2024-03-11

Updated

2024-08-11

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/96b93253-31d0-4184-94b7-f1e18355d841/

Security advisories

• https://wpscan.com/vulnerability/96b93253-31d0-4184-94b7-f1e18355d841

References

• CVE Record
• NVD entry