CVE-2026-109900: WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability

Q: Which installations are affected?

Melapress Role Editor versions through 1.3.0 are affected. The available information does not state whether any particular WordPress configuration or plugin feature must be enabled.

Q: Does exploitation require an existing account or special permissions?

The severity vector indicates no privileges are required, but user interaction is required. The provided data does not identify what interaction an attacker must induce or whether it involves a WordPress user or administrator.

Q: What is the potential impact?

Successful exploitation can result in privilege escalation. The severity vector indicates high impacts to confidentiality, integrity, and availability, with the impact extending beyond the vulnerable component's security scope.

Published Nov 8, 2026

Updated

Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Privilege Escalation.This issue affects Melapress Role Editor: from n/a through 1.3.0.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Melapress Role Editor to a version that resolves this vulnerability.
Fixed in 1.4.0

Event History

Nov 8, 2026

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·04:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

Melapress Role Editor versions through 1.3.0 are affected. The available information does not state whether any particular WordPress configuration or plugin feature must be enabled.

Does exploitation require an existing account or special permissions?

The severity vector indicates no privileges are required, but user interaction is required. The provided data does not identify what interaction an attacker must induce or whether it involves a WordPress user or administrator.

What is the potential impact?

Successful exploitation can result in privilege escalation. The severity vector indicates high impacts to confidentiality, integrity, and availability, with the impact extending beyond the vulnerable component's security scope.

CVE-2026-109900: WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

Does exploitation require an existing account or special permissions?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

Does exploitation require an existing account or special permissions?

What is the potential impact?