This vulnerability in WP Event SOlution (Arraytics) affects all versions up to 4.1.8 and is characterized by missing authorization controls that permit unauthenticated attackers to bypass access restrictions. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. No official patch or remediation guidance has been published by the vendor as of the provided data.

An attacker can gain unauthorized access to sensitive information due to missing authorization checks, potentially exposing confidential data. There is no indication of integrity or availability impact. The vulnerability does not require authentication, increasing the risk of exploitation, although no known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin or disable it if possible to prevent exploitation. Monitor vendor communications for updates on patches or official mitigations.