user_role_editor_publishpress_capabilities_access_control_and_user_roles vulnerabilities

CVEs whose affected-version data names the user_role_editor_publishpress_capabilities_access_control_and_user_roles package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-75927High· 7.2

2w ago

PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant

The PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.50.0. This is due to the `addPluginCa…

▾ Twilightpublishpress · User Role Editor – PublishPress Capabilities: Access Control and User RolesEPSS 0.64%via CVEORG