What the vulnerability does
01Description
The Highland Software Custom Role Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 1.0.0. This is due to insufficient authorization checks in the hscrm_save_user_roles() function, which is hooked to the personal_options_update action accessible by any authenticated user. This makes it possible for authenticated attackers, with Subscriber-level access or higher, to potentially modify user roles via the profile update form.
Explanation of Vulnerability in Simple Terms
02Summary
Highland Software Custom Role Manager versions 1.0.0 and earlier contain a privilege management flaw that allows authenticated users with low privileges to gain unauthorized access to sensitive data and modify site content. An attacker with a basic user account can read confidential information, alter critical settings, or disrupt site availability without additional interaction. This vulnerability affects the core role and permission system.
What an attacker can do
03Attacker Capabilities
Read sensitive data, modify site content, and disrupt availability using a low-privilege user account.
Potential impact on your site
04Site Impact
Unauthorized users can access confidential information, alter settings, or cause downtime without admin approval.
Conditions required to exploit
05Prerequisites
Attacker must have a valid low-privilege user account; no special interaction required.
Key dates
06Disclosure timeline
April 27, 2026
CVE published
April 29, 2026
Record updated
