WordPress Plugin Vulnerabilities

User Role Editor - Cross-Site Request Forgery

Description

The User Role Editor WordPress plugin was affected by a Cross-Site Request Forgery security vulnerability.

Affects Plugins

Plugin icon
user-role-editor
Fixed in 3.14

References

Exploitdb
25721

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
b938aa1e-eb2b-4f9b-87a6-ad91e6c1223d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-12-28
Title
NEX-Forms – Ultimate Form Builder < 8.5.5 - Cross-Site Request Forgery
Published
2023-07-19
Title
GTmetrix for WordPress < 0.4.8 - Arbitrary Post Deletion via CSRF
Published
2016-10-27
Title
GoDaddy Email Marketing <= 1.1.3 - Cross-Site Request Forgery (CSRF)
Published
2024-09-24
Title
NiceJob < 3.6.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-02-13
Title
WP PHPList <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting