User Role Editor Pro 4.65 was published at the May 21st, 2026. It contains a lot of fixes, which makes it compatible with WordPress 7.0 and more secure and slightly better.
Changes List
Core version: 4.65
- Update: Marked as compatible with WordPress 7.0
- Update: Minor fixes to pages markup are applied to correspond WordPress 7.0 CSS changes.
- Update: Update: “defined(‘ABSPATH’)” guard was added to all PHP files to exclude PHP files direct execution.
- Update: sanitize_text_field(), sanitize_key(), sanitize_url() functions are used to secure user input before processing.
- Update: _nonce field checking was added before data update in addition checking made already on the higher level.
- Core version was updated to 4.65
- Fix: Users->User Role Editor->Import: single user role was imported successfully but the empty page was shown instead of URE page with successful import notification.
- Fix: Meta Boxes Access add-on: WP Multisite: Network Admin->Users->User Role Editor->Meta Boxes: current role does not lose now all capabilities after the ‘Update’ button click.
- Fix: Other Roles Access add-on: WP Multisite: Network Admin->Users->User Role Editor->Other Roles: current role does not lose now all capabilities after the ‘Update’ button click.
- Fix: Posts Edit Access add-on: WP Multisite: Network Admin->Users->User Role Editor->Posts Edit: current role does not lose now all capabilities after the ‘Update’ button click.
- Fix: Plugins Access add-on: WP Multisite: Network Admin->Users->User Role Editor->Plugins: current role does not lose now all capabilities after the ‘Update’ button click.
- Fix: Export roles CSV download file with .pdf extension in the FireFox browser. Content type header was replaced to ‘text/plain’.
- Update: Meta Boxes Access add-on: data is updated via AJAX without full page refresh now.
- Update: Other Roles Access add-on: data is updated via AJAX without full page refresh now.
- Update: Posts Edit Access add-on: data for role is updated without full page refresh via AJAX now.
- Update: Plugins Access add-on: data is updated via AJAX without full page refresh now.
- Update: Import role CSV: uploaded file .csv extention and mime type checking were added.
- Update: “Users->User Role Editor->Import” button is hidden in case page is opened from the WP Multisite -> Network admin. Use it from the selected single site only.