← CVE Intelligence

CVE-2022-3419

Automatic User Roles Switcher < 1.1.2 - Subscriber+ Privilege Escalation PUBLISHED

Description (CNA)

The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator

Affected (CNA)

Vendor / productVersions
Unknown / Automatic User Roles Switcheraffected 1.1.2 before 1.1.2

CWE

CWE-269, CWE-352

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.