WordPress Plugin Vulnerabilities
HM Multiple Roles < 1.3 - Arbitrary Role Change
Description
The plugin does not have any access control to prevent low privilege users to set themselves as admin via their profile page
Proof of Concept
As any authenticated user, go to your Profile page and Tick the Administrator Role checkbox. In v1.2, the checkboxes are disabled in the UI but can be tampered with by either using the web browser developer tool or a proxy such as Burp Suite
Affects Plugins
Fixed in version 1.6
References
Classification
Miscellaneous
Timeline
Publicly Published
2021-07-20 (about 1 years ago)
Added
2021-07-20 (about 1 years ago)
Last Updated
2022-04-12 (about 7 months ago)