PT-2026-35344 · WordPress · Custom Role Manager

Herc Bandiola · Published 2026-04-27 · Updated 2026-06-04 · CVE-2026-7106

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Highland Software Custom Role Manager versions prior to 1.0.1

Description The Highland Software Custom Role Manager plugin for WordPress allows privilege escalation due to insufficient authorization checks in the hscrm save user roles() function. This function is hooked to the personal options update action, which is accessible to any authenticated user. Consequently, attackers with Subscriber-level access or higher can potentially modify user roles through the profile update form.

Recommendations Update to a version later than 1.0.0. As a temporary workaround, restrict access to the hscrm save user roles() function to prevent unauthorized role modifications.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-7106

Affected Products

Custom Role Manager

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2026-7106 · Security Note
• https://plugins.trac.wordpress.org/browser/highland-software-custom-role-manager/tags/1.0.0/includes/user-ui.php#L203 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/80a258a6-634c-4d7d-981f-bcbc0bb044f7?source=cve · Note
• https://twitter.com/KaitanSecurity/status/2048620682141954532 · Twitter Post
• https://twitter.com/CVEnew/status/2048910108139405372 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2048640455579947483 · Twitter Post
• https://plugins.trac.wordpress.org/browser/highland-software-custom-role-manager/tags/1.0.0/includes/user-ui.php#L289 · Note
• https://t.me/CVEtracker/51888 · Telegram Post
• https://plugins.trac.wordpress.org/browser/highland-software-custom-role-manager/tags/1.0.0/includes/user-ui.php#L223 · Note
• https://plugins.trac.wordpress.org/browser/highland-software-custom-role-manager/trunk/includes/user-ui.php#L289 · Note
• https://plugins.trac.wordpress.org/browser/highland-software-custom-role-manager/trunk/includes/user-ui.php#L203 · Note
• https://twitter.com/Tank23x0/status/2062594482953245116 · Twitter Post
• https://plugins.trac.wordpress.org/browser/highland-software-custom-role-manager/tags/1.0.1/includes/user-ui.php#L203 · Note
• https://twitter.com/atomicedgeWAF/status/2048923158778941683 · Twitter Post
• https://plugins.trac.wordpress.org/browser/highland-software-custom-role-manager/trunk/includes/user-ui.php#L223 · Note