Medium · 4.8 CVE-2022-37403 EUVD-2022-40036GHSA-fjwg-jh7j-r5v7

WordPress Add User Role plugin <= 0.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Sep 9, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nikhil Vaghela's Add User Role plugin <= 0.0.1 at WordPress.

Vendor	Product	Affected	Fixed
Nikhil Vaghela	Add User Role (WordPress plugin)	<= 0.0.1 – ≤ 0.0.1	—