The vulnerability lies in the Cool Media Filter WordPress plugin through version 1.0.1, which fails to perform any capability checks or nonce verification when a role’s capabilities are updated. This omission allows an authenticated subscriber to modify their own role to include administrator privileges, effectively providing them with full control of the site. The primary impact is that a low‑privileged user can gain unrestricted access and alter site configurations, compromise data, or install malicious plugins.

All installations of the Cool Media Filter plugin up to and including version 1.0.1 are affected. Any WordPress site that has this plugin installed and an authenticated user with subscriber role may exploit the flaw.

The flaw permits an authenticated user to elevate privileges without any additional attack vector. Because the attacker requires only authentication as a subscriber, the likelihood of exploitation is high in environments where user accounts are compromised. No CVSS score is provided, and EPSS data is unavailable, but the nature of the vulnerability suggests a critical impact. The flaw is not listed in CISA KEV catalog at this time. The attack vector is inferred as internal, arising from legitimate access within the WordPress admin interface.