CVE-2021-4402

The CVE-2021-4402 entry describes a CSRF vulnerability in the WordPress Multiple Roles plugin up to version 1.3.1 due to missing or incorrect nonce validation in mu_add_roles_in_signup_meta() and mu_add_roles_in_signup_meta_recently(). Unauthenticated attackers could coerce an administrator into ...