CVE-2023-0820
Assigner: WPScan
Published: 2023-04-03T14:38:25.817Z
State: PUBLISHED
title: User Role by BestWebSoft  < 1.6.7 - Privilege Escalation via CSRF
problemTypes: descriptions: description: CWE-352 Cross-Site Request Forgery (CSRF)
type: CWE
affected: vendor: Unknown
product: User Role by BestWebSoft
versions: status: affected
versionType: custom
version: 0
lessThan: 1.6.7
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role.
credits: value: dc11
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator