Skip to content
PluginCanary

User Role by BestWebSoft

User Role by BestWebSoft - Add and Customize Roles and Capabilities in WordPress
by bestwebsoft · 3,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 15 Jul 2026, 2 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for User Role by BestWebSoft
Ownership100
Maintenance85
Security100
Support70
Reputation70

How the score works

Quick answers

Is User Role by BestWebSoft still maintained?
Yes. Last release 15 Jul 2026, 2 releases in the last 24 months. 15 Jul 2026 · wordpress.org
Who owns User Role by BestWebSoft, and has it changed hands?
No change recorded. Main committer bestwebsoft since May 2014. 3 Nov 2026 · SVN log
Was User Role by BestWebSoft removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is User Role by BestWebSoft safe?
2 known vulnerabilities, all fixed (latest in 1.6.7). Not on the exploited list. 13 Mar 2023 · Wordfence Intelligence
Is the latest User Role by BestWebSoft update safe to install?
No ownership change before 1.7.3. No one-star spike after it. 15 Jul 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
bestwebsoft12 May 2014 to 15 Jul 2026, 57 commits

1 committer recorded. No ownership change since 2014.

Maintenance

Last release
4 months ago
Releases, 24 months
2
Tested up to
7.0 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for User Role by BestWebSoft
Q1 20240
Q2 20241
Q3 20240
Q4 20240
Q1 20251
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20261
Q4 20260

Last release 15 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 3.6.

Rating distribution
5 star6
4 star2
3 star0
2 star1
1 star3

Security record

2 vulnerabilities on record, all patched (latest fixed in 1.6.7).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
13 Mar 2023User Role by BestWebSoft <= 1.6.6 - Cross-Site Request Forgery to Privilege Escalation8.8<= 1.6.61.6.7Patched before disclosure
12 Apr 2017User Role <= 1.5.5 - Cross-Site Scripting6.1<= 1.5.51.5.63

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for User Role by BestWebSoft
4 May 202632
11 May 202643
18 May 202643
25 May 202644
1 Jun 202646
8 Jun 202653
15 Jun 202643
22 Jun 202637
29 Jun 202639
6 Jul 202640
13 Jul 20261,402
20 Jul 2026154
27 Jul 2026130
3 Aug 2026121
10 Aug 2026107
17 Aug 202688
24 Aug 202695
31 Aug 202670
7 Sep 2026101
14 Sep 2026250
21 Sep 2026233
28 Sep 2026141
5 Oct 2026113
12 Oct 2026101
19 Oct 2026165
26 Oct 2026201
2 Nov 202623

Weekly downloads over the last 4 weeks are 16% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

MembersScore 93 · 300,000+Controlled Admin AccessScore 93 · 10,000+Access Governance for WordPress (akaScore 90 · 100,000+PublishPress PermissionsScore 90 · 10,000+User Role EditorScore 89 · 700,000+

Facts

Version1.7.3
Authorbestwebsoft
Added12 May 2014
Last updated15 Jul 2026
Active installs3,000+
Requires WordPress5.6
Tested up to7.0.8
Requires PHPnot stated
CategoryUser Management & Authentication > User Registration & Login
Tagscapability, role manager, capability editor, capability manager, change capabilities

Other plugins by this author: reCaptcha by BestWebSoft, Contact Form by BestWebSoft - Advanced WP Contact Form Builder for WordPress, Sitemap by BestWebSoft - WordPress XML Site Map Page Generator Plugin, Captcha by BestWebSoft - Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms, Gallery by BestWebSoft - Customizable Image and Photo Galleries for WordPress, PDF & Print by BestWebSoft - WordPress Posts and Pages PDF Generator Plugin, Pagination by BestWebSoft - Customizable WordPress Content Splitter and Navigation Plugin, Error Log Viewer by BestWebSoft, Limit Attempts by BestWebSoft - WordPress Anti-Bot and Security Plugin for Login and Forms, Multilanguage by BestWebSoft - WordPress Translation Plugin and Language Switcher, Updater by BestWebSoft, Quotes and Tips by BestWebSoft

Questions

Is User Role by BestWebSoft still maintained?

Yes. Last release 15 Jul 2026, 2 releases in the last 24 months.

Who owns User Role by BestWebSoft, and has it changed hands?

No change recorded. Main committer bestwebsoft since May 2014.

Was User Role by BestWebSoft removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is User Role by BestWebSoft safe?

2 known vulnerabilities, all fixed (latest in 1.6.7). Not on the exploited list.

Is the latest User Role by BestWebSoft update safe to install?

No ownership change before 1.7.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue