Vulnerabilities and Security Researches

HM Multiple Roles, CVE-2021-24602

CVE, Research URL: CVE-2021-24602
Home page URL: Security reports for HM Multiple Roles
Application: HM Multiple Roles
Published on: Aug 23, 2021
Research Description: The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page
Affected versions: max 1.6.
Status: vulnerable