plugin

Automatic User Roles Switcher Vulnerabilities

1 known security issue reported for the Automatic User Roles Switcher WordPress plugin. Most recent disclosed Oct 10, 2022.

1 high

Running Automatic User Roles Switcher on your site? Check whether your installed version is affected.

Scan your site free

Automatic User Roles Switcher <= 1.1.1 - Missing Authorization to Privilege Escalation

high

The Automatic User Roles Switcher plugin for WordPress is vulnerable to authorization bypass due to missing authorization on an unknown function in versions up to, and including, 1.1.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change their own role to administr...

CVSS:
8.1
Affected:
up to 1.1.1
Fixed in:
1.1.2
Disclosed:
Oct 10, 2022

CVE-2022-3419 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database