WordPress Plugin Vulnerabilities
User Rights Access Manager < 1.0.4 - Improper Access Controls
Description
The plugin did not properly restrict access to some paths, still allowing a restricted user to access them, and edit the Blog Options, create/edit posts and so on for example
Proof of Concept
Affects Plugins
Classification
Type
ACCESS CONTROLS
OWASP top 10
CWE
CVSS
Miscellaneous
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2021-04-15 (about 4 years ago)
Added
2021-04-15 (about 4 years ago)
Last Updated
2021-04-15 (about 4 years ago)