cool_media_filter vulnerabilities

CVEs whose affected-version data names the cool_media_filter package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-87784High· 8.8

yesterday

Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission

The Cool Media Filter WordPress plugin through 1.0.1 does not perform any capability or nonce check when updating the capabilities of a role, allowing any authenticated user, such as a subscriber, to grant their own role administrator ca…

▾ TwilightEPSS 0.23%via CVEORG