CVE-2017-18566

The user-role plugin before 1.5.6 for WordPress has multiple XSS issues...

EUVD-2023-12824

Malicious code in bioql PyPI...

EUVD-2022-40036

Malicious code in bioql PyPI...

WordPress User Role plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin User Role versions = 1.0...

CVE-2024-56206

CVE-2024-56206 is a CSRF vulnerability in gap-hub-user-role (WordPress plugin) that allows authentication bypass. Affected: gap-hub-user-role from n/a through 3.4.1. The connected records indicate this CVE as an active issue with patch status reported as Unpatched for the specific entry, and CVSS...

PT-2023-16549 · Bestwebsoft · User Role

Name of the Vulnerable Software and Affected Versions: User Role by BestWebSoft WordPress plugin versions prior to 1.6.7 Description: The issue concerns a lack of protection against Cross-Site Request Forgery CSRF in requests to update role capabilities, leading to arbitrary privilege escalation ...

CVE-2022-37403

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in Nikhil Vaghela's Add User Role plugin = 0.0.1 at WordPress...

CVE-2022-37403 WordPress Add User Role plugin <= 0.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in Nikhil Vaghela's Add User Role plugin = 0.0.1 at WordPress...

WordPress user-role plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. user-role is a plug-in for website user management. A cross-site scripting vulnerability exists in the WordPress user-role plugin...

CVE-2017-18566

The user-role plugin before 1.5.6 for WordPress has multiple XSS issues...

CVE-2017-18566

The user-role plugin before 1.5.6 for WordPress has multiple XSS issues...

CVE-2017-18566

The CVE-2017-18566 affects the WordPress plugin “user-role” by BestWebSoft, specifically versions before 1.5.6. The connected data confirms multiple XSS vulnerabilities (CWE-79) in this plugin, with practical impact: authenticated attackers can inject and execute arbitrary JavaScript in victims’ ...