WordPress plugin
Melapress Role Editor security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium1
- Low0
All Melapress Role Editor vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.3 | Unauthenticated Privilege Escalation ≤1.3.0Update to 1.4.0 | CVE-2026-109900 | |
| High8.8 | Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment ≤1.1.1Update to 1.2.0 | CVE-2025-14866 |
- High7.3Unauthenticated Privilege Escalation
≤1.3.0Update to 1.4.0
- High8.8Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment
≤1.1.1Update to 1.2.0
Melapress Role Editor: common questions
Does Melapress Role Editor have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Melapress Role Editor: 2 high, 1 medium. None are known to affect version null.
How do I check which version of Melapress Role Editor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Melapress Role Editor vulnerability?
CVE-2026-109900, published Nov 6, 2026: Melapress Role Editor <= 1.3.0 - Unauthenticated Privilege Escalation. Severity: High (CVSS 7.3).
Is any Melapress Role Editor vulnerability listed in CISA KEV?
No. None of the known Melapress Role Editor vulnerabilities is currently listed in the CISA KEV catalog.