CVE-2026-5617 - Vulnerability Analysis

Overview

WordPress Login as User plugin <= 1.0.3 contains a privilege escalation caused by trusting client-controlled cookie 'oclaup_original_admin' in handle_return_to_admin() without server-side verification, letting authenticated attackers escalate privileges to administrator, exploit requires Subscriber-level access or higher.

Severity & Score

Impact

Authenticated attackers can escalate their privileges to administrator, compromising site control and security.

Mitigation

Update to a version later than 1.0.3 or the latest available version.

References

• https://wordpress.org/plugins/one-click-login-as-user/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/c0c74d48-6cfc-4899-bd2c-4a80b1f6e05f?source=cve
• https://plugins.trac.wordpress.org/browser/one-click-login-as-user/tags/1.0.3/includes/class-login-handler.php#L45
• https://plugins.trac.wordpress.org/browser/one-click-login-as-user/tags/1.0.3/includes/class-login-handler.php#L50
• https://plugins.trac.wordpress.org/browser/one-click-login-as-user/trunk/includes/class-login-handler.php#L45

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner