User Role Editor
Healthy: User Role Editor is maintained, has no open risk signals and no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| shinephp | 22 Mar 2010 to 4 Nov 2026, 691 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 9 days ago
- Releases, 24 months
- 9
- Tested up to
- 7.2 current
- Requires PHP
- 8.2 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 2 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 3 |
| Q4 2026 | 1 |
Last release 26 Oct 2026. Tested with WordPress 7.1 (current).
Support
50% of 2 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 16 Dec 2024 | User Role Editor <= 4.64.3 - Cross-Site Request Forgery to Privilege Escalation | 8.8 | <= 4.64.3 | 4.64.4 | 0 |
| 4 Apr 2016 | User Role Editor <= 4.24 - Authenticated Privilege Escalation | 8.8 | < 4.25 | 4.25 | 0 |
Source: Wordfence Intelligence.
Reputation
| Q1 2024 | 3.7 |
|---|---|
| Q2 2024 | 5.0 |
| Q3 2024 | 3.0 |
| Q4 2024 | 5.0 |
| Q1 2025 | 2.0 |
| Q2 2025 | 3.7 |
| Q3 2026 | 5.0 |
Average rating rose from 3.7 to 5.0 between Q1 2024 and Q3 2026.
| 5 star | 244 |
|---|---|
| 4 star | 10 |
| 3 star | 6 |
| 2 star | 4 |
| 1 star | 24 |
- Wont save capabilities for custom role · 1 star · 16 Apr 2025
- Didn’t work on multisite · 2 stars · 27 Mar 2025
- sadly give · 1 star · 29 Sep 2024
Momentum
700,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 6,470 |
|---|---|
| 11 May 2026 | 13,218 |
| 18 May 2026 | 217,047 |
| 25 May 2026 | 60,369 |
| 1 Jun 2026 | 39,757 |
| 8 Jun 2026 | 30,540 |
| 15 Jun 2026 | 27,589 |
| 22 Jun 2026 | 23,662 |
| 29 Jun 2026 | 22,086 |
| 6 Jul 2026 | 20,541 |
| 13 Jul 2026 | 19,910 |
| 20 Jul 2026 | 23,722 |
| 27 Jul 2026 | 20,033 |
| 3 Aug 2026 | 18,870 |
| 10 Aug 2026 | 17,222 |
| 17 Aug 2026 | 233,101 |
| 24 Aug 2026 | 240,060 |
| 31 Aug 2026 | 60,794 |
| 7 Sep 2026 | 39,154 |
| 14 Sep 2026 | 45,382 |
| 21 Sep 2026 | 201,955 |
| 28 Sep 2026 | 81,891 |
| 5 Oct 2026 | 65,270 |
| 12 Oct 2026 | 34,670 |
| 19 Oct 2026 | 47,553 |
| 26 Oct 2026 | 231,795 |
| 2 Nov 2026 | 13,708 |
Weekly downloads over the last 4 weeks are 19% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 4.66.3 |
|---|---|
| Author | Vladimir Garagulya |
| Added | 22 Mar 2010 |
| Last updated | 26 Oct 2026 |
| Active installs | 700,000+ |
| Requires WordPress | 4.7 |
| Tested up to | 7.2 |
| Requires PHP | 8.2 |
| Category | User Management & Authentication > User Registration & Login |
| Tags | role, user, access, editor, security |
Other plugins by this author: Plugins Garbage Collector (Database Cleanup)
Questions
Is User Role Editor still maintained?
User Role Editor was last updated on 26 Oct 2026. Its Canary status is Healthy.
Is User Role Editor safe?
User Role Editor has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Healthy.
Who owns User Role Editor?
The wordpress.org author is Vladimir Garagulya. Recent committers: shinephp, plugin-master. We have recorded no ownership change.
What can I use instead of User Role Editor?
Plugins in the same category with a higher Canary Score: Members - Membership & User Role Editor Plugin, Controlled Admin Access, Access Governance for WordPress (aka AAM), PublishPress Permissions: Access Control, Content Permissions, User Access, Post Lockdown.