Datawiza Proxy Auth Plugin Authentication Bypass

Executive Summary

The Datawiza Proxy Auth Plugin for WordPress before version 1.1.1 has a critical flaw where it does not check if user-identity and role HTTP headers come from a trusted source. This lets attackers fake these headers and gain WordPress administrator privileges without authentication.

Useful 0 Not Useful 0

Detection Guidance

Check the installed version of the Datawiza Proxy Auth Plugin in WordPress. If it is version 1.1.0 or below, the system is vulnerable. Look for unauthorized administrator accounts or suspicious activity in WordPress logs.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to take full control of a WordPress site, create new admin accounts, or modify content. Since no authentication is required, any unauthenticated user can potentially gain admin access if the plugin is outdated.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR (data protection) and HIPAA (health data privacy) by exposing sensitive user information. Compliance requires timely patching to prevent such risks.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Datawiza Proxy Auth Plugin to version 1.1.1 or later immediately. Review WordPress user accounts for any unauthorized administrators and remove suspicious accounts. Ensure reverse proxy configurations are properly secured.

Useful 0 Not Useful 0