cve.bz

CVE-2021-24602

8.8 highEPSS 1.5%

High (8.8) in hmplugin hm multiple roles. EPSS 1.5% chance of exploitation in the next 30 days.

The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page

Severity

CVSS 3.1

8.8 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWEs
CWE-669, CWE-269
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON