User Role Editor Vulnerabilities

The User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.64.3. This is due to missing or incorrect nonce validation on the update_roles() function. This makes it possible for unauthenticated attackers to add or remove roles for arbitrary users, includ...

CVSS:

8.8

Affected:

up to 4.64.3

Fixed in:

4.64.4

Disclosed:

Dec 16, 2024

CVE-2024-12293 on NVD →

The User Role Editor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'update' function in versions up to, and including, 4.24. This makes it possible for any authenticated attackers to grant themselves the administrator role.

CVSS:

8.8

Affected:

up to 4.25

Fixed in:

4.25

Disclosed:

Apr 4, 2016