bestwebsoft user role vulnerabilities

Latest bestwebsoft user role CVEs

Newest publication first

1. CVE-2023-0820 User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF

   Published 2023-04-03

   High·CVSS 8.8 EPSS 0.41%

   The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role.

2. CVE-2017-18566 User Role <= 1.5.5 - Cross-Site Scripting

   Published 2019-08-20

   Medium·CVSS 6.1 EPSS 1.4%

   The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.

3. CVE-2017-2171 Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to...

   Published 2017-05-22

   Medium·CVSS 6.1 EPSS 0.89%

   Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fie...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.