CVE-2026-87784: Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission

Q: Who can exploit this issue?

Any authenticated WordPress user can exploit it, including users with only the Subscriber role. An attacker must be able to log in to the affected site.

Q: What access can an attacker gain?

An authenticated attacker can modify their role's capabilities to grant themselves administrator-level permissions, enabling takeover of the WordPress site.

Q: Is there evidence that exploitation is feasible?

Yes. The record is flagged as having a proof of concept.

Published Nov 6, 2026

Updated

The Cool Media Filter WordPress plugin through 1.0.1 does not perform any capability or nonce check when updating the capabilities of a role, allowing any authenticated user, such as a subscriber, to grant their own role administrator capabilities and take over the site.

Event History

Nov 6, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

Any authenticated WordPress user can exploit it, including users with only the Subscriber role. An attacker must be able to log in to the affected site.

What access can an attacker gain?

An authenticated attacker can modify their role's capabilities to grant themselves administrator-level permissions, enabling takeover of the WordPress site.

Is there evidence that exploitation is feasible?

Yes. The record is flagged as having a proof of concept.

CVE-2026-87784: Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission

Event History

Frequently Asked Questions

Who can exploit this issue?

What access can an attacker gain?

Is there evidence that exploitation is feasible?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What access can an attacker gain?

Is there evidence that exploitation is feasible?