This vulnerability in N-Media Simple User Registration (up to version 6.8) involves incorrect privilege assignment in the wp-registration component, allowing privilege escalation. The CVSS v3.1 base score is 8.8, indicating a high impact with network attack vector, low attack complexity, privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. No patch or vendor advisory has been provided yet, and the vulnerability is not related to a cloud service.

Successful exploitation allows an attacker with limited privileges to escalate their privileges, potentially gaining full control over the affected WordPress installation. This can lead to complete compromise of data confidentiality, integrity, and availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to trusted users and monitor for suspicious activity related to user registration and privilege changes. Avoid deploying the affected plugin version in sensitive environments if possible.