WordPress plugin · Pro · Version 1.0.0
WP Role Capability Review
See what your WordPress roles store before changing permissions.
WP Role Capability Review presents stored role definitions in a read-only review. Find an exact role key, inspect five roles per batch, and distinguish true grants, explicit false values and unsupported entries without exposing user identities.
Highlight capabilities worth investigating, including plugin installation, user management and unfiltered content. These highlights are review prompts—not proof of a vulnerability or a recommendation to remove access.
The report does not list usernames, email addresses, user counts or role display names. It does not change permissions, users, roles or settings. Reviewing requires both administrator settings access and permission to list users, plus an active Pro license. Freemius handles licensing separately.
Stored definitions are not effective user permissions. User-specific capabilities, authorization filters, object-specific checks, multisite super administrators and plugin logic can alter actual access. A false stored entry is not a guarantee that access is denied.
Review up to 100 roles and 500 capabilities per role, with partial results identified. Use an exact role key to inspect a role outside the first 100. Unsupported names and non-boolean values remain unknown. Investigate actual behavior on staging before changing any role.
Pro costs $19/year for one site. Requires WordPress 6.2+ and PHP 8.0+. Conditional 14-day refund policy applies. This is a stored-definition review, not a security certification or enforcement tool.
Get WP Role Capability Review Pro
From download to your first role review
- Download your plugin ZIP through Freemius.
- In WordPress, choose Plugins → Add New → Upload Plugin, then install and activate.
- Activate your Pro license.
- Open Tools > Role Capability Review. Review stored capabilities, filter by exact role key and continue through the five-item batches.