EIP-2026-114159

This exploit demonstrates a CSRF vulnerability in WP User Role Editor <=3.12, allowing an attacker to elevate a user's privileges to administrator by tricking an admin into visiting a crafted URL.