Datawiza Proxy Auth Plugin
Monthly
Unauthenticated privilege escalation in the Datawiza Proxy Auth Plugin for WordPress lets a remote attacker forge the user-identity and role HTTP headers the plugin consumes and thereby create and authenticate as a WordPress administrator, giving full control of the site (CVSS 3.1 base 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The disclosed affected range is 1.1.0 up to but not including 1.1.1, and the vendor has released 1.1.1 as the fix. Practical exploitability is topology-dependent: forged headers are only honored if externally supplied copies actually reach the plugin, so a correctly configured front-end proxy that strips or overwrites these headers blocks the attack. A public PoC reference exists but is not verified as working exploit code, and EPSS is low at 0.14% (3rd percentile) despite the maximal severity score, so the vulnerability.today decision label is act_now on the basis of impact rather than observed exploitation.
Unauthenticated privilege escalation in the Datawiza Proxy Auth Plugin for WordPress lets a remote attacker forge the user-identity and role HTTP headers the plugin consumes and thereby create and authenticate as a WordPress administrator, giving full control of the site (CVSS 3.1 base 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The disclosed affected range is 1.1.0 up to but not including 1.1.1, and the vendor has released 1.1.1 as the fix. Practical exploitability is topology-dependent: forged headers are only honored if externally supplied copies actually reach the plugin, so a correctly configured front-end proxy that strips or overwrites these headers blocks the attack. A public PoC reference exists but is not verified as working exploit code, and EPSS is low at 0.14% (3rd percentile) despite the maximal severity score, so the vulnerability.today decision label is act_now on the basis of impact rather than observed exploitation.