WordPress Plugin Vulnerabilities

User Rights Access Manager < 1.0.4 - Improper Access Controls

Description

The plugin did not properly restrict access to some paths, still allowing a restricted user to access them, and edit the Blog Options, create/edit posts and so on for example

Proof of Concept

Affects Plugins

Classification

Type
ACCESS CONTROLS
CWE

Miscellaneous

Verified
Yes

Timeline

Publicly Published
2021-04-15 (about 4 years ago)
Added
2021-04-15 (about 4 years ago)
Last Updated
2021-04-15 (about 4 years ago)

Other