This vulnerability in WP Sharks s2Member Pro involves improper privilege management (CWE-269), which can allow an attacker to escalate privileges without authentication or user interaction. The affected versions include all versions up to 240315. The CVSS 3.1 vector indicates the attack can be performed remotely (AV:N) with low attack complexity (AC:L), no privileges required (PR:N), and no user interaction (UI:N). The impact is limited to confidentiality (C:H) with no integrity or availability impact. No patch or official remediation has been disclosed by the vendor as of the publication date.

Successful exploitation could allow an unauthenticated attacker to gain elevated privileges within the s2Member Pro plugin environment, potentially exposing sensitive information. There is no indication of impact on data integrity or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should monitor official WP Sharks communications for updates. No vendor advisory or official fix has been published at this time.