This vulnerability in the Woocommerce Wholesale Lead Capture plugin allows an attacker to escalate privileges due to incorrect privilege assignment. It affects versions up to 2.0.3.1 and has a critical CVSS 3.1 score of 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No official patch or fix information is available from the vendor or advisory sources at this time.

Successful exploitation could allow an unauthenticated attacker to gain elevated privileges within the affected plugin environment, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. This could result in unauthorized access to sensitive data and control over the application functionality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected plugin or disabling it if possible to reduce exposure.