本ページは bestwebsoft user_role に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2023-0820 | The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role. | [email protected] | 8.8 | 0.11% | 2023-04-03 | 2025-02-14 |
| CVE-2017-18566 | The user-role plugin before 1.5.6 for WordPress has multiple XSS issues. | [email protected] | 6.1 | 0.10% | 2019-08-20 | 2024-11-21 |
| CVE-2017-2171 | Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to version 1.3.2, Custom Search prior to version 1.36, Donate prior to version 2.1.1, Email Queue prior to version 1.1.2, Error Log Viewer prior to version 1.0.6, Facebook Button prior to version 2.54, F | [email protected] | 6.1 | 0.23% | 2017-05-22 | 2026-05-13 |