User Roles and Capabilities

Quick answers

Is User Roles and Capabilities still maintained?

No. Last release 9 May 2021, over 5 years ago. 9 May 2021 · wordpress.org

Who owns User Roles and Capabilities, and has it changed hands?

No change recorded. 3 Nov 2026 · SVN log

Was User Roles and Capabilities removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org

Is User Roles and Capabilities safe?

No. 1 known vulnerability has no fix in the current version. 19 Jun 2025 · Wordfence Intelligence

Is the latest User Roles and Capabilities update safe to install?

No ownership change before 1.2.6. No one-star spike after it. 9 May 2021 · Release history

Active signals

Facts we detected, with links to the source.

• CriticalSEC-2Vulnerability published 19 Jun 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.3 Jul 2025Evidence
• CriticalMNT-1No release in 66 months (last release 9 May 2021). Plan a replacement if the plugin is important to your site.9 May 2022Evidence
• WarningMNT-2Tested up to WordPress 5.7.21, 14 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

1 committer recorded. No ownership change since 2015.

Security record

1 vulnerability in 24 months, 1 with no fix in the current version.

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Access Governance for WordPress (akaScore 98 · 100,000+PublishPress PermissionsScore 98 · 10,000+Controlled Admin AccessScore 97 · 10,000+User Role EditorScore 96 · 700,000+WPFront User Role EditorScore 95 · 30,000+

Facts

Questions