Melapress Role Editor vulnerabilities

3 known vulnerabilities in Melapress Role Editor from Melapress. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  Melapress Role Editor: Incorrect Privilege Assignment

  CVE-2026-109900Nov 8, 2026Melapress

  Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Privilege Escalation.This issue affects Melapress Role Editor: from n/a through 1.3.0.

• 7.1 High severity

  Melapress Role Editor: Missing Authorization

  CVE-2026-109899Nov 8, 2026Melapress

  Missing Authorization vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress Role Editor: from n/a through 1.3.0.

• 8.8 High severity

  Melapress Role Editor: Incorrect Authorization

  CVE-2025-14866Jan 23, 2026Melapress

  The Melapress Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.1. This is due to a misconfigured capability check on the 'save_secondary_roles_field' function. This makes it possible for authentic