Highland Software Custom Role Manager vulnerabilities

1 known vulnerability in Highland Software Custom Role Manager from Jgrodgers. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Highland Software Custom Role Manager: Improper Privilege Management

  CVE-2026-7106Apr 27, 2026Jgrodgers

  The Highland Software Custom Role Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 1.0.0. This is due to insufficient authorization checks in the hscrm_save_user_roles() function, which is hooked to the persona