This vulnerability in Hide My WP Ghost (<=7.0.06) is categorized as CWE-639 (Authorization Bypass Through User-Controlled Key). It allows an attacker to bypass authentication mechanisms by manipulating user-controlled keys, resulting in unauthorized access. The CVSS 3.1 base score is 7.4, indicating high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts confidentiality and integrity but not availability. The vendor has not provided an official fix or remediation level, and no patch links are available. The vulnerability is published and tracked but no known exploits have been reported.

Successful exploitation can lead to unauthorized access bypassing authentication controls, compromising confidentiality and integrity of the affected system. Availability is not impacted. This could allow attackers to access sensitive information or perform unauthorized actions within the affected plugin environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is provided, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected plugin or implementing compensating controls to limit exposure.