CVE-2023-7247: The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.

PriorityP423medium4.9CVSS 3.1

AVNACLPRHUINSUCHINAN

EPSS

0.64%

45.9th percentile

The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
wp-buy	login_as_user_or_customer	<= 3.8	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.