This vulnerability (CVE-2024-43143) in the Roundup WP Registrations for the Events Calendar plugin is classified as CWE-862 (Missing Authorization). It arises from improperly configured access control, allowing users with limited privileges to perform unauthorized actions. The issue affects all versions up to 2.12.1. The CVSS 3.1 base score is 6.4, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and impacts on integrity and availability. No patch or official remediation level has been published yet.

Exploitation of this vulnerability can result in unauthorized modification or disruption of the affected plugin's functionality, impacting data integrity and availability. Since the attack requires some privileges but no user interaction, an attacker with limited access could escalate their impact. There is no evidence of confidentiality impact or known active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations for the Registrations for the Events Calendar plugin to limit exposure. Monitor for vendor updates regarding patches or official mitigations.