Shinephp vulnerabilities
We track 1 vulnerability in Shinephp products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 17, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Shinephp vulnerabilities
- 8.8 High severity
User Role Editor: Cross-Site Request Forgery
The User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.64.3. This is due to missing or incorrect nonce validation on the update_roles() function. This makes it possible for unauthenticated