This vulnerability in the WP Custom Admin Interface plugin results from incorrectly configured access control security levels, leading to missing authorization checks. It allows an attacker with low privileges to perform unauthorized actions, potentially altering plugin behavior or configurations. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity and no user interaction required, but limited to integrity impact without confidentiality or availability effects.

An attacker with low privileges can exploit this vulnerability to perform unauthorized actions that may modify data or configurations within the WP Custom Admin Interface plugin. There is no confidentiality or availability impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to trusted users and review user permissions carefully to minimize risk.