CVE-2026-115214EUVD-2026-109352GHSA-H3J8-JGX9-4QJV
Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 1.1.1
- Public exploit
- None on Exploit-DB
CISA SSVC
- Exploitation: none
- Automatable: yes
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
The Datawiza Proxy Auth Plugin for WordPress, which handles single sign-on through a reverse proxy, is affected. An unauthenticated attacker could send forged identity and role headers to create an account and log in as a WordPress administrator, giving them full control of the website.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator.
Affected versions
- Unknown Datawiza Proxy Auth Plugin
From 1.1.0 · fixed in 1.1.1