CVE-2026-115214
Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator.
| Vendor | unknown |
| Product | datawiza proxy auth plugin |
| Published | Oct 25, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown datawiza proxy auth plugin
Be the first to know when new unknown vulnerabilities affecting unknown datawiza proxy auth plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Datawiza Proxy Auth Plugin
1.1.0 < 1.1.1
References
Credits
Naoki Kawahigashi WPScan