This vulnerability in Builderall Builder for WordPress (versions up to 3.0.1) involves improper control over code generation, enabling an attacker to inject arbitrary code. The CVSS 3.1 base score of 9.9 reflects the critical nature of the flaw, with network attack vector, low attack complexity, and no user interaction required. Successful exploitation could lead to complete compromise of the affected system's confidentiality, integrity, and availability. The vulnerability is publicly disclosed but lacks vendor-provided patch or mitigation details.

Exploitation of this vulnerability can result in full system compromise, including unauthorized disclosure of information, modification of data, and disruption of service. The critical CVSS score indicates a high likelihood of severe impact if exploited. However, no known active exploits have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.