This vulnerability (CVE-2026-49058) affects LoginPress Pro versions up to 6.2.2 and involves incorrect privilege assignment (CWE-266). It allows an unauthenticated attacker to escalate privileges, potentially gaining full control over the affected system. The CVSS 3.1 base score is 9.8, with attack vector network, low attack complexity, no privileges required, no user interaction, and impacts to confidentiality, integrity, and availability all rated high. No official patch or remediation information is provided in the available data, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability allows an unauthenticated attacker to escalate privileges, potentially leading to full compromise of the affected LoginPress Pro installation. This can result in complete loss of confidentiality, integrity, and availability of the system or data managed by the plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is provided in the available data, users should monitor the vendor's communications for updates and consider restricting access to vulnerable installations until a patch is released.