Privilege Escalation Vulnerability in Login as User Plugin for WordPress

CVE-2026-5617

What is CVE-2026-5617?

The Login as User plugin for WordPress allows authenticated users to exploit a weakness in the handle_return_to_admin() function. By relying on a client-controlled cookie (oclaup_original_admin) without proper server-side validation, a user with Subscriber-level access can change the cookie to an administrator's user ID. This allows them to gain unauthorized administrative privileges when utilizing the 'Return to Admin' feature, thereby increasing the risk of potential malicious activities within the WordPress site.

References