This vulnerability in the ilyasine Maintenance & Coming Soon Redirect Animation plugin allows an attacker to bypass authentication by spoofing identity, potentially granting unauthorized access. It affects all versions up to 2.3.3. The CVSS score of 3.7 indicates a low severity impact, with network attack vector, high attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No patch or vendor advisory has been provided to date.

The impact is limited to potential identity spoofing leading to authentication bypass. Confidentiality is slightly affected, while integrity and availability remain unaffected. The low CVSS score reflects limited impact and exploitation difficulty. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations are provided at this time.