Bestwebsoft
Bestwebsoft User Role: vulnerabilidades y CVE
Bestwebsoft User Role tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-25114 | Alta (7.1) | 0.39% | — | 3 mar 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ehabstar User Role user-roles allows Reflected XSS.This issue affects User Role: from n/a through <= 1.0. |
| CVE-2023-0820 | Alta (8.8) | 0.41% | — | 3 abr 2023 | The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role. |
| CVE-2017-18566 | Media (6.1) | 1.4% | — | 20 ago 2019 | The user-role plugin before 1.5.6 for WordPress has multiple XSS issues. |
| CVE-2017-2171 | Media (6.1) | 0.89% | — | 22 may 2017 | Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to… |