CVE-2026-115214: Datawiza Proxy Auth Plugin 1.1.0 to before 1.1.1

Affected technology

Datawiza Proxy Auth Plugin · 1.1.0 to before 1.1.1
Vendor not specified by the source

Description’s affected range: before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy

Component: Not specified by the source

What an attacker can do

Unauthenticated attackers can create and authenticate as a WordPress administrator.

Published 25-Oct-2026 10:32 UTC

KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-25 10:32:14.832500+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-25 10:32:11.866563+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-115214.html