Skip to content
OpenAdvisories
High · 7.1 CVE-2026-109899 EUVD-2026-119612GHSA-h52v-5xj7-v25h

WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerability

Published Nov 8, 2026 · Updated Nov 8, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress Role Editor: from n/a through 1.3.0.

Affected products

VendorProductAffectedFixed
Melapress Melapress Role Editor ≤ 1.3.0 —

References