Multimanager Wp – Manage All Your Wordpress Sites Easily
Approved changes feed: RSS · Atom
cpe:2.3:a:icdsoft:multimanager_wp_–_manage_all_your_wordpress_sites_easily:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Icdsoft (26283d8a-d14a-5378-a386-8d42ff33e8eb) |
|---|---|
| Product | Multimanager Wp – Manage All Your Wordpress Sites Easily (877e6b69-eadc-52c9-a95e-5246be31c985) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-11028 |
vulnerable | 2026-06-08 06:23:48.527070 |
MultiManager WP – Manage All Your WordPress Sites Easily <= 1.0.5 - Authentication Bypass via User Impersonation
CRITICAL (9.8)
The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the user impersonation feature inappropriately determining the current user via user-supplied input. This makes it possible for unauthenticated attackers to generate an impersonation link that will allow them to log in as any existing user, such as an administrator. NOTE: The user impersonation feature was disabled in version 1.1.0 and re-enabled with a patch in version 1.1.2.
Published: 2024-11-13T09:30:26.145Z
Updated: 2026-04-08T17:28:21.159Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.