8.8

CVE-2024-49675

WordPress iBryl Switch User plugin <= 1.0.1 - Account Takeover vulnerability

iBryl Switch User <= 1.0.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

Authentication Bypass Using an Alternate Path or Channel vulnerability in Vitalii iBryl Switch User ibryl-switch-user allows Authentication Bypass.This issue affects iBryl Switch User: from n/a through <= 1.0.1.
Mögliche Gegenmaßnahme
Plugin Name: iBryl Switch User: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Vitaliibryl ≫ Switch User SwPlatformwordpress Version <= 1.0.1
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Plugin Name: iBryl Switch User
Version *-1.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.383
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
audit@patchstack.com 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-288 Authentication Bypass Using an Alternate Path or Channel

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

https://patchstack.com/database/Wordpress/Plugin/ibryl-switch-user/vulnerability/wordpress-ibryl-switch-user-plugin-1-0-1-account-takeover-vulnerability?_s_id=cve
https://www.wordfence.com/threat-intel/vulnerabilities/id/a9cc4dcf-7485-458c-8376-a19b2c32f8d6
Third Party Advisory