Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:login_as_user_or_customer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductLogin As User Or Customer (8c1e2529-649f-55be-8f49-f6c7bbe85e61)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-7247 vulnerable 2026-06-08 06:21:57.401212 Login as User or Customer <= 3.8 - Admin Account Takeover
The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.
Published: 2024-03-11T17:56:06.449Z
Updated: 2024-08-11T13:36:09.877Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4305 vulnerable 2026-06-08 05:51:37.168943 Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin
The Login as User or Customer WordPress plugin before 3.3 lacks authorization checks to ensure that users are allowed to log in as another one, which could allow unauthenticated attackers to obtain a valid admin session.
Published: 2023-01-23T14:31:57.132Z
Updated: 2025-04-03T19:19:19.996Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.