CVE-2023-7247

Name of the Vulnerable Software and Affected Versions Login as User or Customer WordPress plugin versions 3.8 and earlier

Description The issue allows users to log in as any other user on the site, potentially leading to complete administrator account takeover. It is crucial to keep WordPress plugins up-to-date to prevent such attacks.

Recommendations For versions 3.8 and earlier, update the Login as User or Customer WordPress plugin to a version later than 3.8 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the site to minimize the risk of exploitation.