Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-0820

User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown User Role by BestWebSoft

Default version status: unaffected

  • 0 to < 1.6.7affected

References