Highland Software Custom Role Manager
| 开发者 | jgrodgers |
|---|---|
| 更新时间 | 2026年4月26日 07:55 |
| PHP版本: | 7.2 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Highland Software Custom Roles Manager extends WordPress role management by allowing administrators to create custom roles, assign multiple roles to users, and manage capabilities through an intuitive interface.
This plugin follows WordPress best practices for role and capability management, including strict server-side validation and protection against unsafe capability assignment.
安装:
- Upload the plugin folder to
/wp-content/plugins/ - Activate the plugin through the 'Plugins' menu in WordPress
- Navigate to "HS Roles" in the admin menu
- Configure roles and capabilities
屏幕截图:
常见问题:
Can users have multiple roles?
Yes, users can be assigned multiple roles using a checkbox interface.
Are default roles modified?
No. Default WordPress roles are protected and cannot be modified.
Is the administrator role protected?
Yes, sensitive capabilities such as manage_options are restricted.
Will this plugin affect existing users?
No. Existing users retain their roles unless explicitly changed.
更新日志:
1.0.1
- Security: Fixed a privilege escalation vulnerability in role assignment logic.
- Security: Enforced strict server-side capability checks for role modifications.
- Security: Prevented assignment of restricted capabilities such as manage_options.
- Security: Hardened AJAX endpoints with capability and nonce validation.
- Hardening: Improved role validation and synchronization logic.
- Hardening: Added rate limiting to AJAX endpoints.
- Props: Thanks to 0xherc1337 and Steven Stern (sterndata) for responsibly reporting the issue.
- Initial release
- Multi-role assignment
- Role grouping and ordering
- Capability management system