CVE-2023-0820

Description

The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role.

Related CPE's

References

https://wpscan.com/vulnerability/b93d9f9d-0fd9-49b8-b465-d32b95351912

CvssV3 impact

CvssV2 impact