Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission

Description

The plugin does not perform any capability or nonce check when updating the capabilities of a role, allowing any authenticated user, such as a subscriber, to grant their own role administrator capabilities and take over the site.