Read the docs

Addify

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Addify records in CISA KEV

No Addify vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Role Based Pricing For Woocommerce 2 records HIGH Abandoned Cart Recovery 1 record MEDIUM Advanced Free Gifts 1 record MEDIUM Automatic User Roles Switcher 1 record MEDIUM Checkout Fields Manager 1 record MEDIUM Custom Fields For Woocommerce 1 record MEDIUM Custom Order Number 1 record MEDIUM Custom Registration Forms Builder 1 record MEDIUM

Records

1 record in Automatic User Roles Switcher · all components

TI-2022-03157 CVE-2022-3419 · GHSA-w8cr-4wjm-8jwj

Automatic User Roles Switcher < 1.1.2 - Subscriber+ Privilege Escalation

Priority MEDIUM 62

The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00407 Published 2022-10-31 Fixed in 1.1.2 CWE-269
Open these records in search →