cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2024-9192,https://securityvulnerability.io/vulnerability/CVE-2024-9192,Privilege Escalation Vulnerability in WordPress Video Robot's Ultimate Video Importer Plugin,"The WordPress Video Robot plugin, developed by CodeCanyon, is affected by a vulnerability that involves insufficient validation of user metadata, specifically in the wpvr_rate_request_result() function. This weakness enables authenticated users with subscriber-level access and above to manipulate their user metadata, allowing them to escalate their privileges to that of an administrator. This vulnerability impacts all versions of the plugin up to and including version 1.20.0, thereby posing a significant risk to WordPress sites utilizing this plugin.",Wordpress,WordPress Video Robot - The Ultimate Video Importer,8.8,HIGH,0.0005000000237487257,false,,false,false,false,,,false,false,,2024-11-16T03:20:44.515Z,0