Roles & Capabilities
Watch: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 50 |
| Security | 100 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 27 Aug 2019 to 27 Aug 2019, 1 commits |
|---|---|
| arielhr1987 | 28 Aug 2019 to 19 Dec 2025, 42 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 11 months ago
- Releases, 24 months
- 4
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 1 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 3 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 19 Dec 2025. Tested up to 6.9, 2 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 12 Sep 2024 | Roles & Capabilities <= 1.1.9 - Reflected Cross-Site Scripting | 6.1 | <= 1.1.9 | 1.1.10 | 5 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 5.0 from 7 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 7 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 57 |
|---|---|
| 11 May 2026 | 86 |
| 18 May 2026 | 173 |
| 25 May 2026 | 190 |
| 1 Jun 2026 | 134 |
| 8 Jun 2026 | 152 |
| 15 Jun 2026 | 85 |
| 22 Jun 2026 | 111 |
| 29 Jun 2026 | 131 |
| 6 Jul 2026 | 98 |
| 13 Jul 2026 | 166 |
| 20 Jul 2026 | 164 |
| 27 Jul 2026 | 148 |
| 3 Aug 2026 | 120 |
| 10 Aug 2026 | 323 |
| 17 Aug 2026 | 136 |
| 24 Aug 2026 | 134 |
| 31 Aug 2026 | 92 |
| 7 Sep 2026 | 85 |
| 14 Sep 2026 | 249 |
| 21 Sep 2026 | 149 |
| 28 Sep 2026 | 150 |
| 5 Oct 2026 | 200 |
| 12 Oct 2026 | 182 |
| 19 Oct 2026 | 328 |
| 26 Oct 2026 | 164 |
| 2 Nov 2026 | 45 |
Weekly downloads over the last 4 weeks are 20% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.1.14 |
|---|---|
| Author | Ariel |
| Added | 28 Aug 2019 |
| Last updated | 19 Dec 2025 |
| Active installs | 1,000+ |
| Requires WordPress | 4.1 |
| Tested up to | 6.9.11 |
| Requires PHP | 7.4 |
| Category | User Management & Authentication > User Registration & Login |
| Tags | edit, role, admin, permissions, capabilities |
Other plugins by this author: Leira Letter Avatar, Cron Jobs, Transients, Access
Questions
Is Roles & Capabilities still maintained?
Roles & Capabilities was last updated on 19 Dec 2025. Its Canary status is Watch.
Is Roles & Capabilities safe?
Roles & Capabilities has no open unpatched vulnerabilities on record. 0 vulnerabilities were published in the last 24 months. Its Canary status is Watch.
Who owns Roles & Capabilities?
The wordpress.org author is Ariel. Recent committers: arielhr1987, plugin-master. We have recorded no ownership change.
What can I use instead of Roles & Capabilities?
Plugins in the same category with a higher Canary Score: Members - Membership & User Role Editor Plugin, Controlled Admin Access, Access Governance for WordPress (aka AAM), PublishPress Permissions: Access Control, Content Permissions, User Access, Post Lockdown.