title: HM Multiple Roles < 1.3 - Arbitrary Role Change
description: The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page
problem types: CWE-269 Improper Privilege Management
affected:
{
product: HM Multiple Roles
vendor: Unknown
versions:
lessThan: 1.3, status: affected, version: 1.3, versionType: custom
}