Filtered by vendor Customer Switching
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-15240 | 2 Customer Switching, Wordpress | 2 Customer Switching, Wordpress | 2026-07-30 | 7.5 High |
| The Customer Switching WordPress plugin before 2.1.3 does not securely bind an active user-switching session to the operator who initiated it, allowing a lower-privileged account that an operator is currently switched into to be resolved as that operator and to switch into any permitted account, including an administrator, resulting in full account takeover. | ||||
Page 1 of 1.