WordPress security by component
Highland Software Custom Role Manager
Plugin description
Highland Software Custom Role Manager creates and manages custom WordPress user roles and capabilities.
Highland Software Custom Role Manager (highland-software-custom-role-manager) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Apr 27, 2026; the highest published CVSS base score is 8.8.
Plugin slug:
highland-software-custom-role-managerLatest vulnerability
CVE-2026-7106: Highland Software Custom Role Manager: Privilege escalation or authentication bypass
Highland Software Custom Role Manager is affected by privilege escalation or authentication bypass. Exploitation requires an authenticated subscriber account. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 1.0.0.
| Safe version |
|
||
|---|---|---|---|
| Apr 27, 2026 |
CVE-2026-7106
Highland Software Custom Role Manager: Privilege escalation or authentication bypass
Highland Software Custom Role Manager is affected by privilege escalation or authentication bypass. Exploitation requires an authenticated subscriber account. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 1.0.0.
|
1.0.5 |
CVE8.8
|