The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role.
Affected Software
| Name |
Vendor |
Start Version |
End Version |
| User_role |
Bestwebsoft |
* |
1.6.7 (excluding) |
References