Privilege Escalation Vulnerability in WP User Switch
CVE-2024-37560

8HIGH

Key Information:

Vendor
WordPress
Status
WP User Switch
Vendor
CVE Published:
12 July 2024

Summary

The vulnerability in the IqbalRony WP User Switch plugin arises from improper privilege management, which can be exploited by users to escalate their privileges beyond intended limits. This issue poses security risks by allowing unauthorized access to sensitive functionalities within WordPress, making it critical for users to update to patched versions promptly to mitigate potential threats.

Affected Version(s)

WP User Switch <= 1.1.0

References

https://patchstack.com/database/vulnerability/wp-user-swi...
vdb-entry

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

thiennv (Patchstack Alliance)
.