cbcvebase.

Beycanpress Account Switcher vulnerabilities

1 known vulnerability affecting beycanpress/account_switcher.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2026-6456P2HIGHCVSS 8.8≤ 1.0.22026-05-20
CVE-2026-6456 [HIGH] CWE-287 CVE-2026-6456: The Account Switcher plugin for WordPress is vulnerable to Privilege Escalation in all versions up t The Account Switcher plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.2. This is due to the `rememberLogin` REST API endpoint using a loose comparison (`!=` instead of `!==`) for secret validation at `app/RestAPI.php:111`, combined with no validation that the secret is non-empty. When a target user has
nvd
Beycanpress Account Switcher vulnerabilities | cvebase