This vulnerability in Fusion Builder (<= 3.15.4) involves incorrect privilege assignment (CWE-266) that permits users with contributor privileges to escalate their access rights. The CVSS 3.1 score of 8.8 reflects a network-exploitable flaw with low attack complexity and no required user interaction, resulting in high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor, and no known exploits are reported in the wild as of the publication date.

Successful exploitation allows an attacker with contributor privileges to escalate their permissions, potentially gaining administrative control over the Fusion Builder plugin and the underlying WordPress site. This can lead to full compromise of site content, configuration, and availability, posing a significant security risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict contributor-level access to trusted users only and monitor for suspicious activity related to privilege escalation attempts.