CVE-2026-115214: Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
WordPress sites using Datawiza Proxy Auth Plugin versions before 1.1.1 are affected. The issue applies where the plugin accepts user-identity and role HTTP request headers without verifying that they came from a trusted reverse proxy.
What does an attacker need to exploit it?
An attacker does not need to authenticate. They need to be able to send HTTP requests to the affected WordPress site with the user-identity and role headers that the plugin trusts.
What is the impact of successful exploitation?
An unauthenticated attacker can create and authenticate as a WordPress administrator. This gives the attacker administrative access to the affected WordPress site.
How can I remediate the issue?
Upgrade the Datawiza Proxy Auth Plugin to version 1.1.1 or later. The affected versions are those before 1.1.1.