CVE-2023-0820 (published 2023-04-03T14:38:25.817Z)
The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role.
Affected products: Vendor: Unknown
Product: User Role by BestWebSoft
Versions: 0