Vulnerabilities / User Role Editor
User Role Editor vulnerabilities
Advisories WPSec published for User Role Editor. Other sources may list more. Its attack surface: User Role Editor on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0288 | User Role Editor <= 4.66.1 - Authenticated (Custom-level+) Privilege Escalation via Add Role/Grant Roles AJAX Actions | High 7.2 | 4.66.2 |
License: CC BY 4.0