Description
WordPress Plugin WP User Switch is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently log in as any existing user on the site, including administrator, if they have access to the username. WordPress Plugin WP User Switch version 1.0.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.3 or latest
References
Related Vulnerabilities
Python CVE-2019-16056 Vulnerability (CVE-2019-16056)
WordPress Plugin Subscribe2 Multiple Cross-Site Scripting Vulnerabilities (8.1)
Magento Improper Authorization Vulnerability (CVE-2020-24404)
Oracle JRE CVE-2013-2422 Vulnerability (CVE-2013-2422)
WordPress Plugin AIT Themes-CSV Import/Export Arbitrary File Upload (3.0.3)