CVE-2026-57768 describes an incorrect privilege assignment vulnerability in the favethemes Houzez Login Register plugin, versions up to 3.3.3. This flaw allows an unauthenticated attacker to escalate privileges, potentially compromising the integrity of the affected system. The CVSS 3.1 base score is 8.2, reflecting a network attack vector with low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality and integrity but does not affect availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

An attacker can exploit this vulnerability remotely without authentication or user interaction to escalate privileges, potentially allowing unauthorized modification or control of affected systems. The confidentiality impact is limited, but integrity is highly impacted. Availability is not affected. This could lead to unauthorized actions being performed with elevated privileges within the Houzez Login Register plugin environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No temporary or official fixes are currently documented.