Approved changes feed: RSS · Atom

cpe:2.3:a:addify:automatic_user_roles_switcher:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorAddify (d577410d-c61a-5df6-a4bd-e62c1c21c4f0)
ProductAutomatic User Roles Switcher (4cf00f1f-b639-522b-bead-d56ff723f0b8)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3419 vulnerable 2026-06-03 14:47:58.307757 Automatic User Roles Switcher < 1.1.2 - Subscriber+ Privilege Escalation
The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator
Published: 2022-10-31T00:00:00.000Z
Updated: 2025-05-06T20:12:09.630Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.