Filtered by vendor Wordpress-extensions Subscriptions
Filtered by product Koinonia Link Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-87782 1 Wordpress-extensions 1 Koinonia Link 2026-10-09 8.8 High
The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a role selection submitted with a profile update, allowing any authenticated user, such as a subscriber, to grant themselves the Administrator role.