Koinonia Link 1.1.2 - 1.1.4 - Authenticated (Subscriber+) Privilege Escalation
mediumThe Koinonia Link plugin for WordPress is vulnerable to Privilege Escalation in versions 1.1.2 through 1.1.4. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for authenticated attackers, with subscriber-level access and above, to elevate their privileges b...
- CVSS:
- 6.3 (Wordfence)
- Affected:
- 1.1.2 – 1.1.4
- Fixed in:
- 1.1.5
- Disclosed:
- Oct 5, 2026