https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:07:26.173943+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-342680 EUVD-2026-342680 2026-10-06T23:07:26.219754+00:00 EUVD-2026-342680 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15240 fkie_cve-2026-15240 2026-10-06T23:07:26.219789+00:00

The Customer Switching WordPress plugin before 2.1.3 does not securely bind an active user-switching session to the operator who initiated it, allowing a lower-privileged account that an operator is currently switched into to be resolved as that operator and to switch into any permitted account, including an administrator, resulting in full account takeover.

 https://cve.radiocsirt.org/vuln/ghsa-fpgp-7gxr-qx3q GHSA-fpgp-7gxr-qx3q 2026-10-06T23:07:26.219822+00:00

The Customer Switching WordPress plugin before 2.1.3 does not securely bind an active user-switching session to the operator who initiated it, allowing a lower-privileged account that an operator is currently switched into to be resolved as that operator and to switch into any permitted account, including an administrator, resulting in full account takeover.