Multiple Roles < 1.3.7 - Privilege Escalation
2022-07-26 00:00
AnonymousStrategic Overview
Vulnerability Overview
The Multiple Roles plugin for WordPress is vulnerable to privilege escalation in versions before 1.3.7. This could allow authenticated attackers to escalate their privileges by updating user roles on the site.
Technical Analysis
REMEDIATION: Update to version 1.3.7, or a newer patched version --- IDENTIFIER: CWE-285 (Improper Authorization) The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C