This vulnerability in ThemeGrill's User Registration Stripe plugin (versions <= 1.3.12) allows unauthenticated attackers to bypass access control mechanisms due to missing authorization checks. The CVSS 3.1 score of 8.2 reflects a network attack vector with low attack complexity, no privileges required, no user interaction, and impacts confidentiality and integrity. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

An attacker can exploit this missing authorization vulnerability remotely without authentication to gain unauthorized access or perform unauthorized actions that compromise the integrity and confidentiality of the system. Availability is not impacted. The high CVSS score indicates significant potential impact if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates and consider restricting access to the affected plugin functionality where possible.