Логотип exploitDog
bind:CVE-2022-3419
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-3419

Количество 2

Количество 2

nvd логотип

CVE-2022-3419

больше 3 лет назад

The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-w8cr-4wjm-8jwj

больше 3 лет назад

The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-3419

The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator

CVSS3: 6.5
0%
Низкий
больше 3 лет назад
github логотип
GHSA-w8cr-4wjm-8jwj

The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator

CVSS3: 6.5
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу