Vulnerability record/PUBLISHED/Published Oct 25, 2026 06:00:22 UTC
CVE-2026-115214
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityWPScan
Last updatedOct 25, 2026 06:00:22 UTC
PublishedOct 25, 2026 06:00:22 UTC
ReservedOct 22, 2026 07:21:23 UTC
Credits
- Naoki Kawahigashi
- WPScan