User Role Editor Pro version 4.24.6

User Role Editor Pro version 4.24.6 was published at April 15, 2016.

Changes list

Core version: 4.25.1

  • Fix: Selected role’s capabilities list was returned back to old after click “Update” button. It was showed correctly according to the recent updates just after additional page refresh.
  • Update: deprecated function get_current_user_info() call was replaced with wp_get_current_user().

User Role Editor Pro version 4.24.5

User Role Editor Pro version 4.24.5 was published at April 2nd, 2016. It’s the security update to fix critical vulnerability. Versions affected (free and Pro) 4.24.4 and earlier. This exploit allowed to any registered user to raise his permissions up to administrator level.
It’s strongly recommended to update your copy of User Role Editor Pro to the latest version.

Changes List

Core version: 4.25

  • Important security update: Any registered user could get an administrator access. Thanks to John Muncaster for discovering and wisely reporting this vulnerability.
  • URE pages title tag was replaced from h2 to h1, for compatibility with other WordPress pages.