Title: Security issue
Last modified: July 16, 2021

---

# Security issue

 *  Resolved [clemorphy](https://wordpress.org/support/users/clemorphy/)
 * (@clemorphy)
 * [4 years, 8 months ago](https://wordpress.org/support/topic/security-issue-117/)
 * Hi
 * Any user with a basic role can go to his edit profile page and change his role
   to admin.
    I don’t know if this is the intended behaviour, but it can be a real
   security issue.

Viewing 1 replies (of 1 total)

 *  Plugin Author [Hossni Mubarak](https://wordpress.org/support/users/mhmrajib/)
 * (@mhmrajib)
 * [4 years, 8 months ago](https://wordpress.org/support/topic/security-issue-117/#post-14674792)
 * Thank you [@clemorphy](https://wordpress.org/support/users/clemorphy/) for notifying
   the issue.
    We have blocked it for non admin user in the latest update. Hope 
   it helps.

Viewing 1 replies (of 1 total)

The topic ‘Security issue’ is closed to new replies.

 * ![](https://ps.w.org/hm-multiple-roles/assets/icon-256x256.png?rev=2465490)
 * [HM Multiple Roles](https://wordpress.org/plugins/hm-multiple-roles/)
 * [Support Threads](https://wordpress.org/support/plugin/hm-multiple-roles/)
 * [Active Topics](https://wordpress.org/support/plugin/hm-multiple-roles/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/hm-multiple-roles/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/hm-multiple-roles/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [Hossni Mubarak](https://wordpress.org/support/users/mhmrajib/)
 * Last activity: [4 years, 8 months ago](https://wordpress.org/support/topic/security-issue-117/#post-14674792)
 * Status: resolved