The vulnerability identified as CVE-2024-37560 in the WP User Switch plugin by IqbalRony is classified under CWE-269 (Improper Privilege Management). It allows privilege escalation due to insufficient access control mechanisms in the plugin versions up to 1.1.0. The CVSS 3.1 base score is 8.0, reflecting network attack vector, low attack complexity, required privileges at a low level, user interaction needed, unchanged scope, and high impact on confidentiality, integrity, and availability. No patch or official fix has been published yet, and the plugin is not a cloud service, so remediation depends on vendor updates or user mitigation.

Successful exploitation of this vulnerability can lead to privilege escalation, granting an attacker higher-level access than intended. This can compromise the confidentiality, integrity, and availability of the WordPress site using the affected plugin. Given the high CVSS score, the impact is significant, potentially allowing attackers to perform unauthorized actions within the WordPress environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the WP User Switch plugin functionality to trusted administrators only or temporarily disabling the plugin if privilege escalation risk is unacceptable. Monitor vendor channels for updates and apply patches promptly once available.