CVE-2023-0820

User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF

High · published April 3, 2023

CVSS v3.1
8.8
EPSS
0%
Percentile
34.2
In the wild
Unconfirmed
What it is

The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.2th percentile
Published
2023-04-03T14:38Z
EPSS history
Timeline
  • 03 APR 14:38Z
    User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF
    cvelistv5