Authentication Bypass Vulnerability in Swiss Toolkit For WP Plugin

CVE-2024-5204

What is CVE-2024-5204?

The Swiss Toolkit For WP plugin for WordPress is vulnerable to an authentication bypass due to the improper handling of custom data stored in post metadata. This vulnerability is present in versions up to and including 1.0.7. As a result, authenticated attackers with contributor-level or higher permissions can exploit this flaw to log in as any existing user, including site administrators, without proper authorization. Such unauthorized access can lead to significant security risks, including unauthorized actions and data manipulation on the affected WordPress sites.

References