Koinonia Link vulnerabilities
We track 1 vulnerability in Koinonia Link products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 7, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Koinonia Link vulnerabilities
- 8.8 High severity
Koinonia Link: Improper Privilege Management
The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a role selection submitted with a profile update, allowing any authenticated user, such as a subscriber, to grant themselves the Administrator r