User Role Editor – PublishPress Capabilities: Access Control and User Roles vulnerabilities

1 known vulnerability in User Role Editor – PublishPress Capabilities: Access Control and User Roles from PublishPress. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  User Role Editor – PublishPress Capabilities…: Improper Privilege Management

  CVE-2026-75927Sep 9, 2026PublishPress

  The PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.50.0. This is due to the `addPluginCapabilities()` function