WordPress Plugin Vulnerabilities

Groups 1.4.5 - Negated Role Capability H&ling Elevated Privilege Issue

Description

The Groups WordPress plugin was affected by a Negated Role Capability H&ling Elevated Privilege Issue security vulnerability.

Affects Plugins

Plugin icon
groups
Fixed in 1.4.6

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287

Miscellaneous

Verified
No
WPVDB ID
d498d8c3-f95e-4452-875a-29c8fc7d7712

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2014-08-01
Title
WordPress 3.7.1 & 3.8.1 - Potential Authentication Cookie Forgery
Published
2024-11-04
Title
Loginizer Security and Loginizer < 1.9.3 - Authentication Bypass
Published
2025-07-25
Title
MelaPress Login Security 2.1.0 - 2.1.1 - Privilege Escalation via Authentication Bypass
Published
2024-03-21
Title
Inline Related Posts < 3.6.0 - Subscriber+ Password Protected Post Read
Published
2025-03-07
Title
miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon < 200.3.10 - Authentication Bypass