WordPress Role Includer plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

CVE-2024-54290

What is CVE-2024-54290?

A reflected Cross-Site Scripting (XSS) vulnerability exists in the Role Includer plugin developed by Justin Fletcher, impacting versions up to 1.6. This vulnerability allows attackers to inject malicious scripts into web pages viewed by users. When exploited, this could lead to session hijacking, defacement, or unauthorized actions on the part of the user. Web developers and site administrators using the Role Includer plugin are urged to implement security measures to prevent such vulnerabilities and ensure the safety and integrity of their websites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References