Datawiza CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Datawiza CVE published 2026-10-25

CVE-2026-115214

The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy. This oversight allows unauthenticated attackers to create and authenticate as a WordPress administrator. The vulnerability is particularly concerning because it could enable attackers to bypass authentication mechanisms, potenti [truncated]