WordPress security by component

Melapress Role Editor

Plugin description

Melapress Role Editor is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 23, 2026; the highest CVE/CNA score is 8.8.

Plugin slug: melapress-role-editor

Latest vulnerability

CVE-2025-14866: Melapress Role Editor: Privilege escalation or authentication bypass

Melapress Role Editor is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess.

PublishedJan 23, 2026

Safe version guidanceSee mitigation notes

		Safe version
Jan 23, 2026	CVE-2025-14866 Melapress Role Editor: Privilege escalation or authentication bypass Melapress Role Editor is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE8.8 NVDPending