CVE-2024-9890

The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. This is due to an improper capability check in the 'switchUser' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator. CVE-2024-50503 may be a duplicate.

• CWE-288

• https://plugins.trac.wordpress.org/browser/user-toolkit/tags/1.2.3/src/UserSwitch.php#L51
• https://plugins.trac.wordpress.org/changeset/3175190/user-toolkit#file5
• https://www.wordfence.com/threat-intel/vulnerabilities/id/805f18e2-9a5a-48cf-81f4-825da4bfd8ef?source=cve

Published

Oct 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-9884The T(-) Countdown plugin for WordPress is vulnerable to Sto…6.4
• CVE-2024-9885The Widget or Sidebar Shortcode plugin for WordPress is vuln…6.4
• CVE-2024-9886The WP Baidu Map plugin for WordPress is vulnerable to Store…6.4
• CVE-2024-9887The Login using WordPress Users ( WP as SAML IDP ) plugin fo…7.2
• CVE-2024-9888The ElementInvader Addons for Elementor plugin for WordPress…5.4
• CVE-2024-9889The ElementInvader Addons for Elementor plugin for WordPress…4.3
• CVE-2024-9891The Multiline files upload for contact form 7 plugin for Wor…4.3
• CVE-2024-9892The Add Widget After Content plugin for WordPress is vulnera…4.8
• CVE-2024-9893The Nextend Social Login Pro plugin for WordPress is vulnera…9.8
• CVE-2024-9894A vulnerability, which was classified as critical, was found…8.8
• CVE-2024-9895The Smart Online Order for Clover plugin for WordPress is vu…5.4
• CVE-2024-9896The BBP Core – Expand bbPress powered forums with useful fea…6.1