Source evidence

Security issues & no support.

HM Multiple Roles · review · 2023-08-16T19:28:00+00:00

HM Multiple Roles plugin evidence original source source API

complaintsentiment

highseverity

0.97relevance

1replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 34 rows with source links

17.6% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

28 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

review

webpie unresolved

This plugin contains a cross-site-scripting vulnerability that was first discovered on July, 18th. Since then, me and other userts have tried to inform/ reach the plugin’s developer via the plugin’s support-forum, but never received a fix or reply. Therefore, i had to deactivate this plugin and would recommend others to do the same, due to mentioned security-issues mentioned above. This topic was modified 2 years, 10 months ago by webpie . Hello @webpie I thought I have updated you via our email. That vulnerability issue was already fixed but somehow they didn’t update it. We contacted them and updated the status immediately. You can check it here – https://patchstack.com/database/vulnerability/hm-multiple-roles/

Commercial Context

Opportunity

access control and account operations

User access-control assurance for keeping user access, permissions, and protected content correct

Buyer: membership site owners, agencies, and operations teams

Wedge: test user roles, protected content, SSO/login handoffs, and private-data exposure

Proof Blocked card complete market

Analysis

heuristic-v1

Summary: Security issues & no support.: users show security, bugs, performance pain that may indicate a product gap.

Evidence quote: Security issues & no support.

Affected feature: email

security bugs performance support

Plugin

API

HM Multiple Roles

1.0K active installs · 28.5K downloads · rating 72.0

role roles user user roles users

Comments

1 shown

Hossni Mubarak 2023-08-29T01:10:00+00:00

Hello @webpie I thought I have updated you via our email. That vulnerability issue was already fixed but somehow they didn’t update it. We contacted them and updated the status immediately. You can check it here – https://patchstack.com/database/vulnerability/hm-multiple-roles/