Skip to content
OpenAdvisories

Vendor

royalnavneet

2 known vulnerabilities.

Products

Login as User – Switch User & WooCommerce Login as Customer 1 Delete All Comments of wordpress 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-5617

    Login as User <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation via 'oclaup_original_admin' Cookie

    The Login as User plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the handle_return_to_admin() function trusting a client-controlled cookie (oclaup_original_admin) to determine which user …

    royalnavneet Login as User – Switch User & WooCommerce Login as Customer Web / CMS