Skip to content
Threat Feed
Subscribe

Vendor

Melapress

2 briefs RSS
high advisory

Melapress Role Editor: Missing Authorization vulnerability (CVE-2026-109899)

A missing authorization vulnerability in Melapress Role Editor (versions n/a through 1.3.0) allows exploiting incorrectly configured access control security levels.

Melapress Role Editor
1c
critical advisory

Melapress Role Editor: Incorrect privilege assignment vulnerability (CVE-2026-109900)

An incorrect privilege assignment vulnerability in Melapress Role Editor versions 1.3.0 and prior enables unprivileged users to perform unauthorized privilege escalation.

Melapress Role Editor wordpress privilege-escalation vulnerability
1t 1c