WordPress Login As Users plugin <= 1.4.2 - Broken Authentication vulnerability

The Improper Privilege Management vulnerability allows an attacker to bypass access controls and assume the privileges of other users, potentially including administrators. Successful exploitation could lead to complete compromise of a WordPress site, enabling attackers to modify content, install malicious plugins, steal user credentials, or deface the website. The impact is particularly severe given the plugin's function – allowing users to log in as others – which, when combined with privilege escalation, creates a highly exploitable scenario. This could be leveraged to gain access to sensitive data or perform actions on behalf of other users without authorization.

WordPress websites utilizing the Login As Users plugin, particularly those running versions 1.4.2 or earlier, are at significant risk. Sites with weak user access controls or those that rely heavily on the Login As Users plugin for testing or debugging purposes are especially vulnerable.

• wordpress / composer / npm:

wp plugin list | grep "Login As Users"

• wordpress / composer / npm:

wp plugin update --all

• wordpress / composer / npm:

wp plugin status | grep "Login As Users"

• wordpress / composer / npm:

wp plugin version Login As Users

1. 2024-08-19Disclosure

   disclosure

1. Reservado2024-08-09
2. Publicada2024-08-19
3. Modificada2024-08-22
4. EPSS atualizado2026-04-02

The primary mitigation for CVE-2024-43311 is to immediately upgrade the Login As Users plugin to version 1.4.3 or later. If upgrading is not immediately feasible due to compatibility issues or breaking changes, consider temporarily disabling the plugin to prevent exploitation. While a direct workaround is unavailable, implementing strict user access controls and regularly auditing user permissions can help limit the potential damage if the vulnerability is exploited. Review WordPress user roles and permissions to ensure least privilege is enforced.