Advisories · Technology

User Role Editor – PublishPress Capabilities: Access Control and User Roles.

Every CVE that names User Role Editor – PublishPress Capabilities: Access Control and User Roles among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75927 CVE record

CVSS 7.2 High

PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant
- User Role Editor – PublishPress Capabilities: Access Control and User Roles
- Privilege escalation
Not analysed yet 9 Sept 2026