← Database

CVE-2022-3419

MEDIUM CVSS: 6.5 Published: 2022-10-31 Modified: 2026-06-17

Description

The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator

Affected Platforms

Addify Automatic User Roles Switcher

Weakness Type

CWE-269, CWE-352

References