CVE-2026-115214

Summary

The Datawiza Proxy Auth Plugin before 1.1.1 for WordPress trusts user-identity and role HTTP headers without verifying they come from a trusted reverse proxy, allowing unauthenticated attackers to forge these headers and gain administrative access.

Exploitability

Trivial to exploit over the network with no authentication or user interaction required; only requires sending crafted HTTP requests to the WordPress site.

Blast radius

Successful exploitation grants full administrative control of the WordPress instance, enabling complete site takeover, data exfiltration, malware deployment, and lateral movement if the host is on a broader network.

Detection

Look for HTTP requests containing X-Forwarded-User, X-Auth-User, or similar identity/role headers (e.g., X-Forwarded-Role: administrator) sent directly to WordPress endpoints without passing through a known reverse proxy; such headers arriving from non-proxy IPs or lacking expected proxy metadata (e.g., missing X-Forwarded-For from trusted ranges) are highly suspicious.

Prioritized remediation

Upgrade to Datawiza Proxy Auth Plugin version 1.1.1 or later, which implements proper validation that the required HTTP headers originate from an authorized reverse proxy.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.