CVE-2026-87782

Summary

The flaw allows any authenticated user to grant themselves the Administrator role without proper role validation, enabling unauthorized administrative access.

Exploitability

Exploitation is relatively straightforward as it requires only an authenticated user status and access to the profile update feature.

Blast radius

If exploited, the attacker could gain full control over the WordPress site, leading to potential data loss, unauthorized content changes, and further exploitation of the site.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Koinonia Link WordPress plugin version 1.1.5 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.