The vulnerability identified as CVE-2024-49219 affects the RS-Members plugin by themexpo, specifically versions up to 1.0.3. It involves incorrect privilege assignment that permits privilege escalation. The CVSS v3.1 base score is 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating that an attacker with some privileges can exploit this remotely without user interaction to gain high impact on confidentiality, integrity, and availability. No patch or official fix details are currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an attacker with limited privileges to escalate their access rights, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. This could result in unauthorized data access, modification, or disruption of service. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the RS-Members plugin to trusted users only and monitor for unusual privilege escalations. Avoid granting unnecessary privileges to users within the affected versions.