User Role Editor Pro version 4.56.2 was published at June 6th, 2020. It’s the security issue fix release. It’s recommended to install ASAP for sites which have non-admin user with ‘edit_users’ capability and restricted list of user roles, which he allowed to grant to another users.
Changes List
Core version: 4.55.1
- Core version was updated to 4.55.1
- Security fix: User with ‘edit_users’ capability could assign to another user a role not included into the editable roles list. This fix is required to install ASAP for all sites which have user(s) with ‘edit_users’ capability granted not via ‘administrator’ role.
- Update: URE_Uninstall class properties were made ‘protected’ to be accessible in URE_Uninstall_Pro class included into the Pro version.
