Threats tagged 'ghsa-6259-cx49-qv5v'

The Cool Media Filter WordPress plugin versions through 1.0.1 have a vulnerability where no capability or nonce checks are performed when updating role capabilities. This flaw allows any authenticated user, including low-privileged roles like subscribers, to escalate their privileges to administrator and take over the site.