[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fr8KZjz_Bk2u9hc5SOUQJHy4A7vAAoFcK01bIfCt8EOs":3,"$fhb94WtisW9fZMSyD1JOFi5-LDw2ds-fQaqul3sPJ98c":250,"$fEbpx2M2sNMwXLOu3bGQhwzM15XRQL0Zgv-9M2ZY3Nj4":255},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"discovery_status":32,"vulnerabilities":33,"developer":52,"crawl_stats":39,"alternatives":60,"analysis":161,"fingerprints":225},"hm-multiple-roles","HM Multiple Roles","2.1.1","Hossni Mubarak","https:\u002F\u002Fprofiles.wordpress.org\u002Fmhmrajib\u002F","\u003Cp>This \u003Ca href=\"https:\u002F\u002Fhmplugin.com\" rel=\"nofollow ugc\">HM Multiple Roles\u003C\u002Fa> plugin provides a user interface and allows you to select multiple roles for a user.\u003C\u002Fp>\n\u003Cp>It hides the default role dropdown list and displays a list of role checkboxes for both new user and update user page.\u003C\u002Fp>\n\u003Cp>Multiple roles can be visible from the All User list page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong> How to use it: \u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FKw4R8B1cV5s?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🌟 Plugin Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy to install and use\u003C\u002Fli>\n\u003Cli>Fully integrated in wordpress\u003C\u002Fli>\n\u003Cli>Select multiple roles\u003C\u002Fli>\n\u003Cli>No extra settings required\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>👍 Feedback\u002FRating:\u003C\u002Fstrong>\u003Cbr \u002F>\nIf you find this plugin helpful, feel free to give us your valuable review. Rate us and share this plugin with your friends and others. This will motivate us and help us to grow.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fhm-multiple-roles\u002Freviews\u002F#new-post\" rel=\"ugc\">Rate Us\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🔥 Other Plugins from \u003Ca href=\"https:\u002F\u002Fhmplugin.com\" rel=\"nofollow ugc\">HM Plugin\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-books-gallery\u002F\" rel=\"ugc\">WP Books Gallery\u003C\u002Fa> Books Gallery Plugin for WordPress\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fworldwide-breaking-news-headlines\u002F\" rel=\"ugc\">Worldwide Breaking News Headlines\u003C\u002Fa> Breaking News, Headlines Widget Plugin for WordPress\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-top-news\u002F\" rel=\"ugc\">WP Top News\u003C\u002Fa> Top News, Breaking News, Headlines Shortcoded Plugin for WordPress\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-stripe-donation\u002F\" rel=\"ugc\">WordPress Stripe Donation\u003C\u002Fa> Donations Coolection Plugin for WordPress using Stripe Payement\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftiny-bar\u002F\" rel=\"ugc\">Tiny Bar\u003C\u002Fa> Message Bar Plugin for WordPress to display Message at Top\u002FBottom Bar of a web page\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhm-cool-author-box-widget\u002F\" rel=\"ugc\">HM – Cool Author Box\u003C\u002Fa> Author Box plugin for WordPress to display author info\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhm-resume-manager\u002F\" rel=\"ugc\">HM Resume Manager\u003C\u002Fa> A Resume\u002FCV Manager Plugin for WordPress\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhm-product-catalog\u002F\" rel=\"ugc\">HM Product Catalog\u003C\u002Fa> A Product Catalog Plugin for WordPress\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhm-wc-product-advertiser\u002F\" rel=\"ugc\">HM Wc Product Advertiser\u003C\u002Fa> Product Advertiser Plugin for Wocommerce\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-scroll-to-post\u002F\" rel=\"ugc\">WP Scroll To Post\u003C\u002Fa> Display random post(Single) at the bottom right corner\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhm-recent-posts-widget\u002F\" rel=\"ugc\">HM Recent Posts Widget\u003C\u002Fa> Ticker Post plugin for WordPress\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-alert-bars\u002F\" rel=\"ugc\">WP Alert Bars\u003C\u002Fa> Notification\u002FAlert box Plugin for WordPress\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhm-simple-facebook-page\u002F\" rel=\"ugc\">FaceBook LikeBox\u003C\u002Fa> A FaceBook LikeBox Plugin for WordPress\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-display-faq\u002F\" rel=\"ugc\">WP Display FAQ\u003C\u002Fa> FAQs manager plugin for WordPress\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhm-logo-showcase\u002F\" rel=\"ugc\">HM Logo Showcase\u003C\u002Fa> Logo manager plugin for WordPress\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhm-multiple-roles\u002F\" rel=\"ugc\">HM Multiple Roles\u003C\u002Fa> Select multiple roles for a user\u003C\u002Fp>\n","It hides the default role dropdown list and displays a list of role checkboxes to select multiple roles for a user.",2000,28029,72,5,"2025-02-06T20:33:00.000Z","6.7.5","5.4","7.2",[20,21,22,23,24],"role","roles","user","user-roles","users","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhm-multiple-roles\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.2.1.1.zip",91,1,0,"2021-07-20 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[34],{"id":35,"url_slug":36,"title":37,"description":38,"plugin_slug":4,"theme_slug":39,"affected_versions":40,"patched_in_version":41,"severity":42,"cvss_score":43,"cvss_vector":44,"vuln_type":45,"published_date":30,"updated_date":46,"references":47,"days_to_patch":49,"patch_diff_files":50,"patch_trac_url":39,"research_status":39,"research_verified":51,"research_rounds_completed":29,"research_plan":39,"research_summary":39,"research_vulnerable_code":39,"research_fix_diff":39,"research_exploit_outline":39,"research_model_used":39,"research_started_at":39,"research_completed_at":39,"research_error":39,"poc_status":39,"poc_video_id":39,"poc_summary":39,"poc_steps":39,"poc_tested_at":39,"poc_wp_version":39,"poc_php_version":39,"poc_playwright_script":39,"poc_exploit_code":39,"poc_has_trace":51,"poc_model_used":39,"poc_verification_depth":39},"CVE-2021-24602","hm-multiple-roles-privilege-escalation-via-arbitrary-role-change","HM Multiple Roles \u003C= 1.2 - Privilege Escalation via Arbitrary Role Change","The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page",null,"\u003C=1.2","1.3","high",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Privilege Management","2024-01-22 19:56:02",[48],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F14f0df3e-4333-49d8-a318-6f9fa614c23e?source=api-prod",917,[],false,{"slug":53,"display_name":7,"profile_url":8,"plugin_count":54,"total_installs":55,"avg_security_score":56,"avg_patch_time_days":57,"trust_score":58,"computed_at":59},"mhmrajib",14,7670,95,136,76,"2026-05-20T01:45:03.981Z",[61,87,107,127,143],{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":72,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":76,"tags":77,"homepage":82,"download_link":83,"security_score":84,"vuln_count":85,"unpatched_count":29,"last_vuln_date":86,"fetched_at":31},"premmerce-user-roles","Premmerce User Roles","1.0.14","Premmerce","https:\u002F\u002Fprofiles.wordpress.org\u002Fpremmerce\u002F","\u003Cp>This plugin has been developed for creating user roles from the WordPress admin area and assigning the arbitrary access rights to them.\u003C\u002Fp>\n\u003Cp>Full documentation is available here: \u003Ca href=\"https:\u002F\u002Fpremmerce.com\u002Fwordpress-custom-user-roles\u002F\" rel=\"nofollow ugc\">Premmerce User Roles\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Major features of “Premmerce User Roles”\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>adding user roles with the features needed\u003C\u002Fli>\n\u003Cli>viewing the features of the standard WordPress roles\u003C\u002Fli>\n\u003Cli>deleting the created user roles\u003C\u002Fli>\n\u003Cli>editing the created user roles\u003C\u002Fli>\n\u003Cli>granting the arbitrary access rights to the user roles\u003C\u002Fli>\n\u003Cli>inheriting the features of the existing roles\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Demo\u003C\u002Fh4>\n\u003Cp>You can create your personal demo store and test  this plugin together with \u003Ca href=\"https:\u002F\u002Fpremmerce.com\u002Ffeatures\u002F\" rel=\"nofollow ugc\">Premmerce Premium\u003C\u002Fa> and all other Premmerce plugins and themes  developed by our team here:  \u003Ca href=\"https:\u002F\u002Fpremmerce.com\u002Fpremmerce-woocommerce-demo\u002F\" rel=\"nofollow ugc\">Premmerce WooCommerce Demo\u003C\u002Fa> .\u003C\u002Fp>\n\u003Ch4>Compatibility with the other Plugins\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WooCommerce\u003C\u002Fli>\n\u003Cli>WooCommerce Multilingual\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin has been  developed for creating user roles from the WordPress admin area and assigning the arbitrary access rights to them.",700,19779,100,2,"2026-02-19T19:23:00.000Z","6.9.4","4.8","5.6",[78,79,23,80,81],"create-custom-user-role","custom-user-roles","user-roles-management","users-roles","https:\u002F\u002Fpremmerce.com\u002Fwordpress-custom-user-roles\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpremmerce-user-roles.1.0.14.zip",93,4,"2025-07-28 00:00:00",{"slug":88,"name":89,"version":90,"author":91,"author_profile":92,"description":93,"short_description":94,"active_installs":95,"downloaded":96,"rating":29,"num_ratings":29,"last_updated":97,"tested_up_to":98,"requires_at_least":98,"requires_php":98,"tags":99,"homepage":104,"download_link":105,"security_score":106,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":31},"multiple-user-post","Multiple User Post","2.0","Kapil Lohakare","https:\u002F\u002Fprofiles.wordpress.org\u002Fkapillohakare\u002F","\u003Cul>\n\u003Cli>This plugin will be helpful if you want to have multiple editor for single post.\u003C\u002Fli>\n\u003Cli>This plugin will add the multiple users to single post so that each user can contribute to the post.\u003C\u002Fli>\n\u003Cli>The Plugin will send and email to registered user to add\u002Fsuggest the edits in the given post.\u003C\u002Fli>\n\u003Cli>Post author can select\u002Fassign the user to post and publish the post.\u003C\u002Fli>\n\u003Cli>The same post content will be forwarded to users and email be sent out for suggesting update.\u003C\u002Fli>\n\u003Cli>User will logged into the admin panel and edit the post at their end. Same information will be forwarded to the author of the post. This information will be displayed into the meta field of the post and author can see it.\u003C\u002Fli>\n\u003Cli>One new “Unread” Custom post type is created for storing these suggestions and this CPT will be hidden from front end so that these edits access protection will be controlled.\u003C\u002Fli>\n\u003Cli>This is because it has one to one relationship within post and users table. This plugin will be helpful for suggest an update for post by different users.\u003C\u002Fli>\n\u003C\u002Ful>\n","assign users, delegate post, edit me, post relationship, one to many, many to many, user post, multiple posts, suggest edit, multiple edit.",10,1501,"2016-07-05T15:57:00.000Z","",[100,101,102,88,103],"admin-user-roles","more-editors","more-users","multiple-user-to-single-post","#","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmultiple-user-post.zip",85,{"slug":108,"name":109,"version":110,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":95,"downloaded":115,"rating":29,"num_ratings":29,"last_updated":116,"tested_up_to":117,"requires_at_least":76,"requires_php":118,"tags":119,"homepage":123,"download_link":124,"security_score":125,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":126},"role-based-user-deleter","Role Based User Deleter","1.0.0","Sakib Hasan","https:\u002F\u002Fprofiles.wordpress.org\u002Fsakibhasan\u002F","\u003Cp>Role Based User Deleter is a lightweight and efficient WordPress plugin that allows administrators to delete users based on their roles. This plugin provides a simple and secure way to manage user accounts, ensuring that you can easily remove users who no longer need access to your site.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Delete users based on selected roles (excluding administrators for safety).\u003Cbr \u002F>\n– User-friendly admin interface with a professional design.\u003Cbr \u002F>\n– Displays the total number of users for each role in the dropdown.\u003Cbr \u002F>\n– Secure deletion process with nonce verification.\u003Cbr \u002F>\n– Success message after user deletion with the count of deleted users.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, visit the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Frole-based-user-deleter\" rel=\"ugc\">plugin support forum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Developed by Sakib Hasan (https:\u002F\u002Fprofiles.wordpress.org\u002Fsakibhasan\u002F).\u003C\u002Fp>\n","Easily delete users based on their roles with Role Based User Deleter. Manage your WordPress users efficiently and securely.",377,"2025-04-26T18:18:00.000Z","6.8.5","7.4",[120,121,122,23],"admin-tools","delete-users","user-management","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frole-based-user-deleter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frole-based-user-deleter.1.0.0.zip",92,"2026-04-06T09:54:40.288Z",{"slug":128,"name":129,"version":130,"author":131,"author_profile":132,"description":133,"short_description":134,"active_installs":29,"downloaded":135,"rating":29,"num_ratings":29,"last_updated":136,"tested_up_to":137,"requires_at_least":138,"requires_php":98,"tags":139,"homepage":98,"download_link":142,"security_score":106,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":126},"cmc-role","CMC ROLE","0.0.1","Edem","https:\u002F\u002Fprofiles.wordpress.org\u002Flovnic\u002F","\u003Cp>Used Manage User Roles\u003Cbr \u002F>\nAdd Custom User roles\u003Cbr \u002F>\nAdd Capabilities to User roles\u003Cbr \u002F>\nRemove Capabilities from User roles\u003Cbr \u002F>\nView Users in a particular role\u003Cbr \u002F>\nDelete User Roles\u003Cbr \u002F>\nClone User Roles\u003C\u002Fp>\n","Manages User Roles",1292,"2017-05-25T12:12:00.000Z","4.8.28","4.6.0",[140,141,21,23,24],"capabilities","role-users","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcmc-role.0.0.1.zip",{"slug":144,"name":145,"version":146,"author":147,"author_profile":148,"description":149,"short_description":150,"active_installs":29,"downloaded":151,"rating":29,"num_ratings":29,"last_updated":152,"tested_up_to":153,"requires_at_least":98,"requires_php":154,"tags":155,"homepage":159,"download_link":160,"security_score":106,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":126},"multi-roles-vendor","Multi Roles Vendor","1.1.0","WPWiredIn","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpwiredin\u002F","\u003Cp>User Role assigment Plugin for WooCommerce Multivendor Sites\u003C\u002Fp>\n\u003Cp>Need help assigning multiple user roles when registering users on your WooCommerce Marketplace? Download the Multi Roles Vendor plugin and do just that! Supports WCMP, WCFM and Dokan marketplace!\u003C\u002Fp>\n\u003Cp>Requirements\u003C\u002Fp>\n\u003Cul>\n\u003Cli>You need to have WooCommerce installed and activated\u003C\u002Fli>\n\u003Cli>You need to have WCMP, WCFM or Dokan installed and activated \u003C\u002Fli>\n\u003Cli>You need to have a WooCommerce User Login\u002FRegistration, or custom Login\u002FRegistration page setup\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>How the Plugin Works\u003C\u002Fp>\n\u003Cp>Just activate the plugin, customize the settings and whenever a User registers on your multi-vendor site, they will be assigned a vendor role\u003C\u002Fp>\n\u003Cp>Alterations\u002FEditing\u003C\u002Fp>\n\u003Cp>You may change the user role in the plugin to any WCMP, WCFM and Dokan roles, like pending vendor etc.\u003C\u002Fp>\n\u003Cp>Versions and Pre-Realease\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This is version 1.1 and it Supports WCMP, WCFM and Dokan Marketplace plugins.\u003Cbr \u002F>\nEnjoy!!!\u003C\u002Fli>\n\u003C\u002Ful>\n","User Role assigment Plugin for WooCommerce Multivendor Sites",2328,"2022-04-12T10:22:00.000Z","5.9.13","6.0",[156,157,23,24,158],"marketplace","multivendor","woocommerce","https:\u002F\u002Fwpwiredin.github.io\u002Fplugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmulti-roles-vendor.zip",{"attackSurface":162,"codeSignals":198,"taintFlows":212,"riskAssessment":213,"analyzedAt":224},{"hooks":163,"ajaxHandlers":194,"restRoutes":195,"shortcodes":196,"cronEvents":197,"entryPointCount":29,"unprotectedCount":29},[164,170,174,178,181,184,188,191],{"type":165,"name":166,"callback":167,"file":168,"line":169},"action","plugins_loaded","hmmr_plugin_init","hm-multiple-roles.php",63,{"type":165,"name":171,"callback":172,"priority":95,"file":168,"line":173},"admin_enqueue_scripts","hmmr_admin_enqueue_scripts",88,{"type":165,"name":175,"callback":176,"priority":29,"file":168,"line":177},"user_new_form","hmmr_add_multiple_roles_ui",137,{"type":165,"name":179,"callback":176,"priority":29,"file":168,"line":180},"show_user_profile",138,{"type":165,"name":182,"callback":176,"priority":29,"file":168,"line":183},"edit_user_profile",139,{"type":165,"name":185,"callback":186,"file":168,"line":187},"personal_options_update","hmmr_save_multiple_user_roles",192,{"type":165,"name":189,"callback":186,"file":168,"line":190},"edit_user_profile_update",193,{"type":165,"name":192,"callback":186,"file":168,"line":193},"user_register",194,[],[],[],[],{"dangerousFunctions":199,"sqlUsage":200,"outputEscaping":202,"fileOperations":29,"externalRequests":29,"nonceChecks":28,"capabilityChecks":72,"bundledLibraries":207},[],{"prepared":29,"raw":29,"locations":201},[],{"escaped":85,"rawEcho":28,"locations":203},[204],{"file":168,"line":205,"context":206},121,"raw output",[208],{"name":209,"version":210,"knownCves":211},"Freemius","1.0",[],[],{"summary":214,"deductions":215},"The \"hm-multiple-roles\" v2.1.1 plugin presents a generally positive security posture based on the static analysis.  The complete absence of attack surface points, dangerous functions, raw SQL queries, file operations, and external HTTP requests are significant strengths. The plugin also demonstrates good security practices by utilizing prepared statements for all SQL queries, implementing nonce checks, and performing capability checks on its entry points.  Furthermore, the static analysis did not reveal any critical or high severity taint flows, indicating a lack of common injection vulnerabilities.\n\nHowever, the plugin's vulnerability history is a notable concern. It has a known CVE related to 'Improper Privilege Management,' and while currently unpatched vulnerabilities are zero, the past high severity issue suggests a historical tendency towards privilege-related security flaws. The presence of the Freemius v1.0 bundled library, which may be outdated, also introduces a potential risk if it contains known vulnerabilities not otherwise exposed by the plugin's own code.  Despite the clean static analysis, the historical vulnerability and the bundled library warrant careful consideration.\n\nIn conclusion, \"hm-multiple-roles\" v2.1.1 has a strong static analysis profile, indicating robust coding practices against common web vulnerabilities. The lack of readily exploitable attack vectors is commendable.  The primary weakness lies in its historical vulnerability record, specifically a past high-severity privilege management issue.  Users should be aware of this history and ensure the plugin is kept up-to-date with any future patches, and consideration should be given to potential risks associated with the bundled Freemius library.",[216,219,221],{"reason":217,"points":218},"Past high severity vulnerability",15,{"reason":220,"points":85},"Bundled outdated library (Freemius v1.0)",{"reason":222,"points":223},"80% output escaping is not 100%",3,"2026-03-16T18:41:13.473Z",{"wat":226,"direct":236},{"assetPaths":227,"generatorPatterns":230,"scriptPaths":231,"versionParams":233},[228,229],"\u002Fwp-content\u002Fplugins\u002Fhm-multiple-roles\u002Fassets\u002Fhmmr-admin.css","\u002Fwp-content\u002Fplugins\u002Fhm-multiple-roles\u002Fassets\u002Fhmmr-admin.js",[],[232],"freemius\u002Fstart.php",[234,235],"hm-multiple-roles\u002Fassets\u002Fhmmr-admin.css?ver=","hm-multiple-roles\u002Fassets\u002Fhmmr-admin.js?ver=",{"cssClasses":237,"htmlComments":239,"htmlAttributes":241,"restEndpoints":247,"jsGlobals":248,"shortcodeOutput":249},[238],"hmmr-roles-container",[240],"\u003C!-- Help us to keep this plugin alive. Buy us a coffee! -->",[242,243,244,245,246],"name=\"hmmr_user_roles[]\"","id=\"user_role_","value=\"","checked=\"checked\"","name=\"_hmmr_roles_nonce\"",[],[],[],{"error":251,"url":252,"statusCode":253,"statusMessage":254,"message":254},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fhm-multiple-roles\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":256,"versions":257},13,[258,263,270,276,283,290,297,304,311,318,324,332,340],{"version":6,"download_url":26,"svn_tag_url":259,"released_at":39,"has_diff":51,"diff_files_changed":260,"diff_lines":39,"trac_diff_url":261,"vulnerabilities":262,"is_current":251},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F2.1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F2.1&new_path=%2Fhm-multiple-roles%2Ftags%2F2.1.1",[],{"version":264,"download_url":265,"svn_tag_url":266,"released_at":39,"has_diff":51,"diff_files_changed":267,"diff_lines":39,"trac_diff_url":268,"vulnerabilities":269,"is_current":51},"2.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.2.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F2.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F2.0&new_path=%2Fhm-multiple-roles%2Ftags%2F2.1",[],{"version":90,"download_url":271,"svn_tag_url":272,"released_at":39,"has_diff":51,"diff_files_changed":273,"diff_lines":39,"trac_diff_url":274,"vulnerabilities":275,"is_current":51},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.2.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F2.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F1.9&new_path=%2Fhm-multiple-roles%2Ftags%2F2.0",[],{"version":277,"download_url":278,"svn_tag_url":279,"released_at":39,"has_diff":51,"diff_files_changed":280,"diff_lines":39,"trac_diff_url":281,"vulnerabilities":282,"is_current":51},"1.9","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.1.9.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F1.9\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F1.8&new_path=%2Fhm-multiple-roles%2Ftags%2F1.9",[],{"version":284,"download_url":285,"svn_tag_url":286,"released_at":39,"has_diff":51,"diff_files_changed":287,"diff_lines":39,"trac_diff_url":288,"vulnerabilities":289,"is_current":51},"1.8","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.1.8.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F1.8\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F1.7&new_path=%2Fhm-multiple-roles%2Ftags%2F1.8",[],{"version":291,"download_url":292,"svn_tag_url":293,"released_at":39,"has_diff":51,"diff_files_changed":294,"diff_lines":39,"trac_diff_url":295,"vulnerabilities":296,"is_current":51},"1.7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.1.7.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F1.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F1.6&new_path=%2Fhm-multiple-roles%2Ftags%2F1.7",[],{"version":298,"download_url":299,"svn_tag_url":300,"released_at":39,"has_diff":51,"diff_files_changed":301,"diff_lines":39,"trac_diff_url":302,"vulnerabilities":303,"is_current":51},"1.6","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.1.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F1.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F1.5&new_path=%2Fhm-multiple-roles%2Ftags%2F1.6",[],{"version":305,"download_url":306,"svn_tag_url":307,"released_at":39,"has_diff":51,"diff_files_changed":308,"diff_lines":39,"trac_diff_url":309,"vulnerabilities":310,"is_current":51},"1.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.1.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F1.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F1.4&new_path=%2Fhm-multiple-roles%2Ftags%2F1.5",[],{"version":312,"download_url":313,"svn_tag_url":314,"released_at":39,"has_diff":51,"diff_files_changed":315,"diff_lines":39,"trac_diff_url":316,"vulnerabilities":317,"is_current":51},"1.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.1.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F1.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F1.3&new_path=%2Fhm-multiple-roles%2Ftags%2F1.4",[],{"version":41,"download_url":319,"svn_tag_url":320,"released_at":39,"has_diff":51,"diff_files_changed":321,"diff_lines":39,"trac_diff_url":322,"vulnerabilities":323,"is_current":51},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.1.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F1.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F1.2&new_path=%2Fhm-multiple-roles%2Ftags%2F1.3",[],{"version":325,"download_url":326,"svn_tag_url":327,"released_at":39,"has_diff":51,"diff_files_changed":328,"diff_lines":39,"trac_diff_url":329,"vulnerabilities":330,"is_current":51},"1.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.1.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F1.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F1.1&new_path=%2Fhm-multiple-roles%2Ftags%2F1.2",[331],{"id":35,"url_slug":36,"title":37,"severity":42,"cvss_score":43,"vuln_type":45,"patched_in_version":41},{"version":333,"download_url":334,"svn_tag_url":335,"released_at":39,"has_diff":51,"diff_files_changed":336,"diff_lines":39,"trac_diff_url":337,"vulnerabilities":338,"is_current":51},"1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhm-multiple-roles%2Ftags%2F1.0&new_path=%2Fhm-multiple-roles%2Ftags%2F1.1",[339],{"id":35,"url_slug":36,"title":37,"severity":42,"cvss_score":43,"vuln_type":45,"patched_in_version":41},{"version":210,"download_url":341,"svn_tag_url":342,"released_at":39,"has_diff":51,"diff_files_changed":343,"diff_lines":39,"trac_diff_url":39,"vulnerabilities":344,"is_current":51},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhm-multiple-roles.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhm-multiple-roles\u002Ftags\u002F1.0\u002F",[],[345],{"id":35,"url_slug":36,"title":37,"severity":42,"cvss_score":43,"vuln_type":45,"patched_in_version":41}]