User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress
User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2023; all 2 are fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2023-0820User Role by BestWebSoft <= 1.6.6 - Cross-Site Request Forgery to Privilege Escalation
Read the full analysisVulnerability Records
User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress
Author
bestwebsoft
User Role by BestWebSoft is a simple and powerful WordPress user role editor plugin that allows you to add, edit, copy, and remove user roles with custom capabilities. Take full control over WordPress user roles and permissions in just a few clicks. Whether you want to change existing roles, create new ones from scratch, or assign multiple roles to a user – this plugin gives you the flexibility to manage all user access on your WordPress website easily and safely. Improve user role management and enhance your website security by customizing what users can and cannot do. View Demo Free Features View and manage WordPress user roles Modify role capabilities and permissions Copy capabilities from other roles Rename any existing role Recover original WordPress role settings Fully compatible with the latest WordPress version Easy-to-use interface with no coding required Clear documentation and helpful video tutorials Multilingual and RTL support Pro Features All features from the Free version, plus: Create unlimited custom WordPress user roles Restrict access to specific plugins and dashboard menu items Reset all standard WordPress roles to default settings Configure user roles and permissions across all subsites in a multisite network Priority support within one business day (Support Policy) Upgrade to Pro Now Looking for a feature that’s not included? Suggest a Feature Documentation & Videos [Doc] User Guide [Doc] Installation [Doc] Purchase [Video] Installation Instruction Help & Support Have questions about the plugin or need help? Visit our Help Center – we’re happy to assist you: https://support.bestwebsoft.com/ Affiliate Program Earn 20% commission by promoting and selling premium WordPress plugins and themes by BestWebSoft — https://bestwebsoft.com/affiliate/ Translation Belarusian (be_BY) (thanks to UStarCash, www.ustarcash.com) Czech (cz_CZ) (thanks to Cathy, www.cathydoesloans.com) Italian (it_IT) (thanks to Cathy, www.cathydoesloans.com) French (fr_FR) (thanks to Cathy, www.cathydoesloans.com) German (de_DE) (thanks to Marcel Leonhard www.mleonhard.info) Russian (ru_RU) Serbian (sr_RS) (thanks to Andrijana Nikolic, www.webhostinggeeks.com) Ukrainian (uk) Some translations may not be complete. You’re welcome to contribute translations by submitting PO and MO files to BestWebSoft. Download Poedit to get started: https://www.poedit.net/download.php Recommended Plugins Updater – Automatically check and update WordPress core, plugins, and themes to the latest versions.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C