CVE-2026-109900Melapress Role Editor

WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability

Not on CISA's list of exploited flaws, and not in the news we track.

Chance of exploitation in 30 daysEPSS

0.34%

0%Higher than 27% of all CVEs

Exploited in the wild: Not confirmedBy CISA
Severity: 9.6 of 10Critical, CVSS
Used in ransomware: Not known
US federal deadline: None set

Fix it in one click

Fix it in your code

Claude Code Codex Cursor Claude Code (web)

Explain it to me

Claude ChatGPT

Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-109900. Nothing runs until you send it.

About this flaw

Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Privilege Escalation.This issue affects Melapress Role Editor: from n/a through 1.3.0.

Published: 8 Nov 2026
Weakness: CWE-266

What should I do about this?

Advisories and references

patchstack.compatchstack.com/database/wordpress/plugin/melapress-role-editor/vulnerability/wordpress-melapress-role-editor-plugin-1-3-0-privilege-escalation-vulnerability?_s_id=cve