Unrated severityNVD Advisory· Published Oct 25, 2026
CVE-2026-115214
CVE-2026-115214
Description
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.1.1
Patches
Vulnerability mechanics
References
1News mentions
1- WordPress Plugins: 25 Vulnerabilities Disclosed in Batch, Including Critical FlawsVypr Intelligence · Oct 25, 2026