CVE-2024-43982 - CVE House
Back to Database
Status published High CVE-2024-43982

WordPress Login As Users plugin <= 1.4.3 - Broken Access Control to Account Takeover vulnerability

Vulnerability Description

Missing Authorization vulnerability in Geek Code Lab Login As Users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login As Users: from n/a through 1.4.3.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-43982

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Ananda Dhakal (Patchstack)

References

More from Geek Code Lab

View All →
CVE-2024-43311
WordPress Login As Users plugin <= 1.4.2 - Broken Authentication vulnerability
Critical 9.8
CVE-2024-24889
WordPress All 404 Pages Redirect to Homepage Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS)
Medium 6.1

Affected Vendor

Geek Code Lab

View all reports →

Affected Software

Login As Users
Vulnerable Versions:
Unknown

Timeline

Official Publish: November 1st, 2024
Last Modified: April 28th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-862

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1078 Valid Accounts
Persistence
T1531 Account Access Removal
Impact