The VOD Infomaniak plugin for WordPress up to version 1.5.15 has an authorization bypass vulnerability. This flaw allows authenticated users with subscriber-level access to perform actions reserved for higher roles, such as Contributor and above. Attackers can misuse the site owner's Infomaniak API credentials to import unauthorized videos, consume the VOD account quota, and manipulate video content displayed via public shortcodes.