CVE-2022-3419

CVE-2022-3419 affects the WordPress plugin Automatic User Roles Switcher (versions prior to 1.1.2). The root cause is missing authorization checks and CSRF protections, enabling any authenticated user (e.g., subscriber) to grant themselves higher privileges, including administrator. According to ...