User Role Editor, PSC-2026-64609

PSC, Research URL: PSC-2026-64609
Home page URL: Security reports for User Role Editor
Application: User Role Editor
Published on: Feb 16, 2026
Research Description: User Role Editor v4.64.6 is a widely used WordPress administration plugin that lets site owners manage roles and capabilities through a clear checkbox based interface, making it easy to add, remove, clone, and delete roles while also supporting per user capability assignments and multisite networks. Because role and capability management directly governs access control across WordPress, any weakness in implementation could have severe impact, including unauthorized privilege changes or admin takeover paths. User Role Editor has passed CleanTalk Plugin Security Certification under PSC-2026-64609, confirming that the plugin was assessed for secure coding practices and validated against major vulnerability classes.
Affected versions: Min 4.64.6, max 4.64.6.
Status: SAFE & CERTIFIED