Skip to content
PluginCanary

WPFront User Role Editor

by Syam Mohan · 30,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: WPFront User Role Editor is maintained, has no open risk signals and no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for WPFront User Role Editor
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
syammohanm2 Mar 2014 to 19 Aug 2026, 151 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
3 months ago
Releases, 24 months
4
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for WPFront User Role Editor
Q1 20241
Q2 20241
Q3 20240
Q4 20241
Q1 20250
Q2 20252
Q3 20250
Q4 20251
Q1 20260
Q2 20260
Q3 20261
Q4 20260

Last release 19 Aug 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
26 Sep 2025WPFront User Role Editor <= 4.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.2.34.2.48
7 Apr 2025WPFront User Role Editor <= 4.2.1 - Cross-Site Request Forgery to Privilege Escalation via whitelist_options Function8.8<= 4.2.14.2.20
1 Apr 2024WPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure4.3<= 3.2.1.111844.1.00
23 Nov 2021WPFront User Role Editor < 3.2.1.11184 - Reflected Cross-Site Scripting6.1< 3.2.1.111843.2.1.11184n/a
23 Nov 2021WPFront User Role Editor <= 3.2.0 - Reflected Cross-Site Scripting6.1<= 3.2.03.2.10

Source: Wordfence Intelligence.

Reputation

Average rating 4.0 in Q2 2025.

Rating distribution
5 star53
4 star4
3 star3
2 star0
1 star5
Latest low reviews

Momentum

30,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WPFront User Role Editor
4 May 2026278
11 May 2026675
18 May 2026624
25 May 2026563
1 Jun 2026555
8 Jun 2026602
15 Jun 2026713
22 Jun 2026631
29 Jun 2026572
6 Jul 2026574
13 Jul 2026584
20 Jul 2026768
27 Jul 2026609
3 Aug 2026624
10 Aug 2026591
17 Aug 202610,245
24 Aug 20262,524
31 Aug 20261,942
7 Sep 20261,559
14 Sep 20261,435
21 Sep 20261,434
28 Sep 20261,508
5 Oct 20261,317
12 Oct 20261,115
19 Oct 20261,586
26 Oct 20261,347
2 Nov 2026192

Weekly downloads over the last 4 weeks are 19% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Members - Membership & User Role Editor PluginScore 93 · 300,000+Controlled Admin AccessScore 93 · 10,000+Access Governance for WordPress (aka AAM)Score 90 · 100,000+PublishPress Permissions: Access Control, Content Permissions, User AccessScore 90 · 10,000+Post LockdownScore 90 · 1,000+

Facts

Version4.2.5
AuthorSyam Mohan
Added2 Mar 2014
Last updated19 Aug 2026
Active installs30,000+
Requires WordPress5.1
Tested up to7.1.4
Requires PHP7.0
CategoryUser Management & Authentication > User Registration & Login
Tagssecurity, role editor, User Access, user permissions, capability manager

Other plugins by this author: WPFront Scroll Top, WPFront Notification Bar, Easy Digital Downloads - Paddle Gateway

Questions

Is WPFront User Role Editor still maintained?

WPFront User Role Editor was last updated on 19 Aug 2026. Its Canary status is Healthy.

Is WPFront User Role Editor safe?

WPFront User Role Editor has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns WPFront User Role Editor?

The wordpress.org author is Syam Mohan. Recent committers: syammohanm, plugin-master. We have recorded no ownership change.

What can I use instead of WPFront User Role Editor?

Plugins in the same category with a higher Canary Score: Members - Membership & User Role Editor Plugin, Controlled Admin Access, Access Governance for WordPress (aka AAM), PublishPress Permissions: Access Control, Content Permissions, User Access, Post Lockdown.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue