CVE-2023-7247

Login as User or Customer <= 3.8 - Admin Account Takeover

Medium · published March 11, 2024

CVSS v3.1
4.9
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00636 · 49.8th percentile
Published
2024-03-11T17:56Z
EPSS history
Timeline
  • 11 MAR 17:56Z
    Login as User or Customer <= 3.8 - Admin Account Takeover
    cvelistv5