CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects WordPress. Its EPSS score suggests a 38.6% probability of exploitation in the next 30 days. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-4305
Severity
CRITICAL
CVSS
9.8
EPSS
38.63%
WordPress
Original NVD Description
The Login as User or Customer WordPress plugin before 3.3 lacks authorization checks to ensure that users are allowed to log in as another one, which could allow unauthenticated attackers to obtain a valid admin session.
Related CVEs
Other vulnerabilities affecting the same vendor(s)