This vulnerability in WP Event SOlution (<=4.1.12) is a missing authorization issue (CWE-862) that permits unauthenticated attackers to bypass access controls. The CVSS 3.1 score of 7.5 indicates a network attack vector with low complexity and no privileges or user interaction required. The impact is high confidentiality loss without affecting integrity or availability. No official patch or remediation level has been published by the vendor or in the advisory data. There are no known exploits in the wild at this time.

An unauthenticated attacker can gain unauthorized access to sensitive information or functionality within WP Event SOlution, leading to a high confidentiality impact. Integrity and availability are not affected according to the CVSS vector. This could result in data exposure or unauthorized information disclosure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected plugin or disabling it if feasible to reduce exposure.