User Role Editor

WordPress plugin · user-role-editor · WordPress.org ↗

Latest v4.66.1 Last release Aug 25, 2026 Tested up to WP 7.1.1 700,000+ active installs

Critical

High

Known total

Unfixed

Running User Role Editor on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 8.8	User Role Editor [user-role-editor] < 4.64.4 WPVulnerability	< 4.64.4	v4.64.4	CVE-2024-12293	Dec 16, 2024
UNKNOWN	User Role Editor [user-role-editor] < 4.25 WPVulnerability	< 4.25	v4.25	—	Apr 5, 2016
UNKNOWN	User Role Editor [user-role-editor] < 4.25 WPVulnerability	< 4.25	v4.25	—	Apr 4, 2016
UNKNOWN	User Role Editor [user-role-editor] < 3.13 WPVulnerability	< 3.13	v3.13	—	May 26, 2013
UNKNOWN	User Role Editor [user-role-editor] < 4.25 WPVulnerability	< 4.25	v4.25	—	—
UNKNOWN	User Role Editor [user-role-editor] < 3.14 WPVulnerability	< 3.14	v3.14	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.