Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: jemoreto Clear all filters
TI-2025-10650 CVE-2025-11620 · GHSA-5jxg-637f-45cf

Multiple Roles per User <= 1.0 - Missing Authorization to Authenticated (Custom+) Privilege Escalation

Priority LOW 34

The Multiple Roles per User plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mrpu_add_multiple_roles_ui' and 'mrpu_save_multiple_user_roles' functions in a…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00386 Published 2025-11-18 No fix listed CWE-862