Lagunaisw

lagunaisw

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Wp Users Masquerade

wp_users_masquerade

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-9522 1Lagunaisw 1Wp Users Masquerade Jun 17, 2026 Oct 10, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 The WP Users Masquerade plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.0. This is due to incorrect authentication and capability checking in the 'ajax_masq_login' functi...Show more The WP Users Masquerade plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.0. This is due to incorrect authentication and capability checking in the 'ajax_masq_login' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2024-9522

1Lagunaisw

1Wp Users Masquerade

Jun 17, 2026

Oct 10, 2024

N/A· v4

8.8 HIGH· v3

N/A· v2

The WP Users Masquerade plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.0. This is due to incorrect authentication and capability checking in the 'ajax_masq_login' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator.Show less