This vulnerability in ThemeGrill User Registration Stripe (<=1.3.12) is due to missing authorization checks, enabling unauthenticated attackers to perform actions that should require authorization. The CVSS 3.1 base score is 8.2, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and impacts confidentiality (low) and integrity (high) without affecting availability. No official patch or remediation guidance is currently available from the vendor or advisory sources.

An attacker can exploit this missing authorization to perform unauthorized actions within the User Registration Stripe plugin, potentially leading to high integrity impact and some confidentiality loss. The vulnerability does not affect availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin functionality or disabling it if feasible to reduce exposure.