VYPR

User Role by BestWebSoft

by WordPress

CVEs (1)

  • CVE-2023-0820Apr 3, 2023
    risk 0.00cvss epss 0.00

    The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role.