Plugin icon

Login as User or Customer

login-as-customer-or-user
Plugin closed

Vulnerabilities:

5

Last Updated:

September 16, 2023

Active Installs:

400

Published
Title
Fixed in
CVSS
Published
2024-02-17
Title
Login as User or Customer <= 3.8 - Admin Account Takeover
Fixed in
No known fix
CVSS
8.8 (high)
Published
2023-12-27
Title
Login as User or Customer (User Switching) <= 3.8 - Authentication Bypass
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2022-12-27
Title
Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin
Fixed in
Fixed in 3.3
CVSS
9.8 (critical)
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via CSRF
Fixed in
Fixed in 2.1
CVSS
9.6 (critical)
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via Low Privilege User
Fixed in
Fixed in 1.8
CVSS
9.9 (critical)