This vulnerability in WP Customer Area arises from missing authorization checks due to misconfigured access control security levels. It affects all versions up to 8.3.4 and allows an attacker with low privileges to perform actions that should be restricted, potentially leading to limited integrity impact. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and limited impact on integrity only. No patch or vendor advisory is available at this time.

The vulnerability allows an attacker with low privileges to bypass access control restrictions, potentially modifying data or performing unauthorized actions within the WP Customer Area plugin. There is no impact on confidentiality or availability. The overall impact is limited to low integrity compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in WP Customer Area where possible to limit exposure. Monitor for updates from aguilatechnologies regarding patches or official mitigations.