Skip to content
Sign in
7.1 High

CVE-2026-109899 WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerability

Description

Missing Authorization vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress Role Editor: from n/a through 1.3.0.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Exploitable remotely over the network, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
Low
Privileges required
Low
Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
None

Affected products and versions

Product Affected versions Fixed in
Melapress Role Editor 1.3 earliest → 1.3.0 No fix stated

Other CVEs of Melapress Role Editor

The 3 CVEs of Melapress Role Editor →
CVE-2026-109900 WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability 9.6 Critical CVE-2025-14866 The Melapress Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and… 8.8 High
Track this CVE