Skip to content
Sign in
9.8 Critical

CVE-2026-115214 The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP…

Description

The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator.

Affected products and versions

Product Affected versions Fixed in
Datawiza Proxy Auth Plugin 1.1 1.1.0 → < 1.1.1 1.1.1
Track this CVE