Skip to content
OpenAdvisories

Vendor

shinephp

1 known vulnerabilities.

Products

User Role Editor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-12293

    User Role Editor <= 4.64.3 - Cross-Site Request Forgery to Privilege Escalation

    The User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.64.3. This is due to missing or incorrect nonce validation on the update_roles() function. This makes it possible for unauthenticated…

    shinephp User Role Editor Web / CMS