Skip to content
Threat Feed
Subscribe

Vendor

Genolve

1 brief RSS
high advisory

Vulnerability in Genolve WordPress Plugin Allows Privilege Escalation

A vulnerability in the Genolve AI image AI video generation plugin for WordPress, affecting versions up to and including 5.0.5, allows authenticated attackers with Contributor-level access to achieve privilege escalation due to a missing capability check in the `genolve_setOpt()` function, enabling them to modify arbitrary WordPress options such as enabling user registration and setting the default role to administrator.

Genolve - AI image AI video generation plugin for WordPress wordpress plugin privilege-escalation vulnerability
1r 1t 1c