Authorization Flaw in mahabub81 User Roles and Capabilities Plugin for WordPress

CVE-2025-49981

What is CVE-2025-49981?

The User Roles and Capabilities Plugin by mahabub81 suffers from a missing authorization vulnerability, which can lead to exploitation through inadequate access control configurations. This weakness impacts user roles, allowing unauthorized users to gain elevated privileges, thus compromising the integrity and security of the application. Versions affected range from n/a through 1.2.6. It is crucial for users of this plugin to review their settings and apply necessary updates to mitigate potential risks.

References