← WordPress Vulnerabilities
WordPress security by component

Edit Role functionality in the Display Users

Edit Role functionality in the Display Users is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 20, 2021; the highest CVE/CNA score is 7.2.

Plugin slug: wp-display-users

CVE-2021-24400: Edit Role functionality in the Display Users: SQL injection

Edit Role functionality in the Display Users is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedSep 20, 2021
Safe version guidanceSee mitigation notes
Safe version
Sep 20, 2021 CVE-2021-24400
Edit Role functionality in the Display Users: SQL injection
Edit Role functionality in the Display Users is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE7.2
NVD7.2