Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2024-50503User Toolkit (WordPress plugin) · Authentication Bypass Using an Alternate Path or Channel Critical9.8EPSS 0.5%2024-10-30CVE Database V5CVE-2024-50503 Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck User Toolkit user-toolkit allows Authentication Bypass.This issue affects User Toolkit: from n/a through <= 1.2.3. EPSS 0.5%Vulnerability Deryck	CVE Database V5	2024-10-30
High	8.8	EPSS 1.1%	CVE-2024-9890User Toolkit (WordPress plugin) · Authentication Bypass Using an Alternate Path or Channel High8.8EPSS 1.1%2024-10-26CVE Database V5CVE-2024-9890 The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. This is due to an improper capability check in the 'switchUser' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator. CVE-2024-50503 may be a duplicate. EPSS 1.1%Vulnerability deryck #cwe-288	CVE Database V5	2024-10-26

Page 1 of 1