This vulnerability in the wpeverest User Registration plugin (<= 4.4.9) arises from missing authorization checks, allowing potential exploitation due to incorrectly configured access control. The CVSS 3.1 score of 4.3 reflects a network attack vector with low complexity and low privileges required, no user interaction, and limited confidentiality impact. No integrity or availability impacts are noted. The vulnerability is published but lacks detailed vendor remediation information or patch links.

The impact is limited to a confidentiality loss, as indicated by the CVSS vector (C:L/I:N/A:N). There is no indication of integrity or availability compromise. The medium severity suggests that unauthorized access could expose some sensitive information but does not allow modification or disruption of service. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, review and tighten access control configurations where possible to mitigate unauthorized access risks.