This vulnerability (CWE-862) in ThemeGrill User Registration Stripe versions up to 1.3.14 allows unauthenticated attackers to bypass access control mechanisms. The issue is classified as broken access control, where authorization checks are missing or insufficient, potentially exposing sensitive data or functionality to unauthorized users. The CVSS v3.1 score is 8.2, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact with limited integrity impact and no availability impact. No official patch or remediation guidance is currently available, and no known exploits are reported in the wild.

The vulnerability allows unauthenticated attackers to access or perform actions that should be restricted, leading to a high confidentiality impact. Integrity impact is limited, and availability is not affected. This could expose sensitive user registration data or related functionality to unauthorized parties.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor ThemeGrill's advisories for updates. Until a patch is available, consider restricting access to the affected plugin functionality or disabling it if feasible.