CVE-2021-24602
High
Description
The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page
SeverityHigh
CVSS8.8
Exploit probability—
ProductHmplugin Hm Multiple Roles
PublishedAug 23, 2021
First seenAug 23, 2021
Weakness typeCWE-269Improper privilege management
How to fix
Update
- hmplugin hm_multiple_roles1.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hmplugin hm_multiple_roles | v < 1.3 | 1.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.