Skip to content
PluginCanary

Multiple Roles

by Christian Neumann · 5,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 14 Jul 2026, 1 release in 24 months, no unpatched vulnerabilities.

95/ 100 Canary Score
Sub-scores for Multiple Roles
Ownership100
Maintenance85
Security100
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Multiple Roles still maintained?
Yes. Last release 14 Jul 2026, 1 release in the last 24 months. 14 Jul 2026 · wordpress.org
Who owns Multiple Roles, and has it changed hands?
No change recorded. Main committer cneumann since May 2022. 3 Nov 2026 · SVN log
Was Multiple Roles removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Multiple Roles safe?
2 known vulnerabilities, all fixed (latest in 1.3.7). Not on the exploited list. 26 Jul 2022 · Wordfence Intelligence
Is the latest Multiple Roles update safe to install?
No ownership change before 1.3.8. No one-star spike after it. 14 Jul 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Mista-Flo23 Oct 2016 to 25 May 2022, 14 commits
cneumann27 May 2022 to 14 Jul 2026, 11 commits

2 committers recorded. No ownership change since 2015.

Maintenance

Last release
4 months ago
Releases, 24 months
1
Tested up to
7.0 vs 7.1
Requires PHP
5.4 supported 8.2+
Releases per quarter
Releases per quarter for Multiple Roles
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20261
Q4 20260

Last release 14 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Rating distribution
5 star14
4 star0
3 star0
2 star0
1 star1

Security record

2 vulnerabilities on record, all patched (latest fixed in 1.3.7).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
26 Jul 2022Multiple Roles < 1.3.7 - Privilege Escalation8.8< 1.3.71.3.7Patched before disclosure
8 Jun 2021Multiple Roles <= 1.3.1- Cross-Site Request Forgery Bypass4.3<= 1.3.11.3.222

Changelog mentions of security fixes: 1.3.8 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

5,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Multiple Roles
4 May 202674
11 May 2026442
18 May 2026357
25 May 2026258
1 Jun 2026432
8 Jun 2026416
15 Jun 2026337
22 Jun 2026414
29 Jun 2026369
6 Jul 2026465
13 Jul 20262,357
20 Jul 2026824
27 Jul 2026651
3 Aug 2026570
10 Aug 2026452
17 Aug 2026463
24 Aug 2026437
31 Aug 2026452
7 Sep 2026312
14 Sep 2026400
21 Sep 2026376
28 Sep 2026458
5 Oct 2026402
12 Oct 2026397
19 Oct 2026476
26 Oct 2026536
2 Nov 202675

Weekly downloads over the last 4 weeks are 24% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Access Governance for WordPress (akaScore 98 · 100,000+PublishPress PermissionsScore 98 · 10,000+Controlled Admin AccessScore 97 · 10,000+User Role EditorScore 96 · 700,000+

Facts

Version1.3.8
AuthorChristian Neumann
Added12 Mar 2015
Last updated14 Jul 2026
Active installs5,000+
Requires WordPress3.1
Tested up to7.0.8
Requires PHP5.4
CategoryUser Management & Authentication > User Registration & Login
Tagsedit roles, user roles, multiple roles, edit user roles, multiple roles per user

Other plugins by this author: GreenerWP

Questions

Is Multiple Roles still maintained?

Yes. Last release 14 Jul 2026, 1 release in the last 24 months.

Who owns Multiple Roles, and has it changed hands?

No change recorded. Main committer cneumann since May 2022.

Was Multiple Roles removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Multiple Roles safe?

2 known vulnerabilities, all fixed (latest in 1.3.7). Not on the exploited list.

Is the latest Multiple Roles update safe to install?

No ownership change before 1.3.8. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue