Skip to content
OpenAdvisories

Vendor

jgrodgers

1 known vulnerabilities.

Products

Highland Software Custom Role Manager 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-7106

    Highland Software Custom Role Manager <= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation

    The Highland Software Custom Role Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 1.0.0. This is due to insufficient authorization checks in the hscrm_save_user_roles() function, which is hooked to the person…

    jgrodgers Highland Software Custom Role Manager Web / CMS