Skip to content
Sign in
9.6 Critical

CVE-2026-109900 WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability

Description

Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Privilege Escalation.This issue affects Melapress Role Editor: from n/a through 1.3.0.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploitable remotely over the network, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
Low
Privileges required
None
Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

Affected products and versions

Product Affected versions Fixed in
Melapress Role Editor 1.3 earliest → 1.3.0 No fix stated

Other CVEs of Melapress Role Editor

The 3 CVEs of Melapress Role Editor →
CVE-2026-109899 WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerability 7.1 High CVE-2025-14866 The Melapress Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and… 8.8 High
Track this CVE