Multiple Roles Multiplerolesproject Multiple Roles

Do you want an email whenever new security vulnerabilities are reported in Multiplerolesproject Multiple Roles?

By the Year

In 2024 there have been 0 vulnerabilities in Multiplerolesproject Multiple Roles . Last year Multiple Roles had 2 security vulnerabilities published. Right now, Multiple Roles is on track to have less security vulnerabilities in 2024 than it did last year.

Year Vulnerabilities Average Score
2024 0 0.00
2023 2 4.30
2022 0 0.00
2021 0 0.00
2020 0 0.00
2019 0 0.00
2018 0 0.00

It may take a day or so for new Multiple Roles vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Multiplerolesproject Multiple Roles Security Vulnerabilities

The Multiple Roles plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.1

CVE-2021-4402 4.3 - Medium - July 01, 2023

The Multiple Roles plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on the mu_add_roles_in_signup_meta() and mu_add_roles_in_signup_meta_recently() functions. This makes it possible for unauthenticated attackers to add additional roles to users via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Session Riding

** REJECT ** CVE split into individual CVE IDs for each software record.

CVE-2021-4342 - June 07, 2023

** REJECT ** CVE split into individual CVE IDs for each software record.

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Rucyproject Rucy or by Multiplerolesproject? Click the Watch button to subscribe.

subscribe