Skip to content
OpenAdvisories

Product · melapress

Melapress Role Editor

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-109899

    WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress Role Editor: from n/a through 1.3.0.

    melapress Melapress Role Editor
  • High 8.8
    CVE-2025-14866

    Melapress Role Editor <= 1.1.1 - Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment

    The Melapress Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.1. This is due to a misconfigured capability check on the 'save_secondary_roles_field' function. This makes it possible for authenti…

    melapress Melapress Role Editor Web / CMS