title: Login as User or Customer <= 3.8 - Admin Account Takeover
description: The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.
problem types: CWE-269 Improper Privilege Management
affected:
{
vendor: Unknown
product: Login as User or Customer
versions:
status: affected, versionType: semver, version: 0, lessThanOrEqual: 3.8
defaultStatus: affected
collectionURL: https://wordpress.org/plugins
}