← CVE Intelligence

CVE-2023-0820

User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF PUBLISHED

Description (CNA)

The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role.

Affected (CNA)

Vendor / productVersions
Unknown / User Role by BestWebSoftaffected 0 before 1.6.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.