CVE-2026-115214

Published Oct 25, 2026

Last updated a day ago

Overview

Description
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator.
Source
contact@wpscan.com
NVD status
Received

Social media

Hype score
Not currently trending

References

Sources include official advisories and independent security research.