Exploit for HM Multiple Roles < 1.3 - Arbitrary Role Change CVE-2021-24602

Name: Exploit for HM Multiple Roles < 1.3 - Arbitrary Role Change CVE-2021-24602
Rating: 5 (388 reviews)

2021-07-20 | CVSS 6.5

## https://sploitus.com/exploit?id=WPEX-ID:5FD2548A-08DE-4417-BFF1-F174DAB718D5
As any authenticated user, go to your Profile page and Tick the Administrator Role checkbox. In v1.2, the checkboxes are disabled in the UI but can be tampered with by either using the web browser developer tool or a proxy such as Burp Suite