CVE-2026-97300: CWE-799 Improper Control of Interaction Frequency in Arraytics WP Event Solution

This vulnerability in WP Event Solution (<=4.1.25) is due to improper control of interaction frequency (CWE-799), leading to unauthenticated broken access control. The CVSS 3.1 score is 6.5 (medium severity) with an attack vector of network, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, but integrity and availability impacts are low and high respectively. No known exploits are reported in the wild. No patch or vendor advisory information is provided.

An unauthenticated attacker can exploit this vulnerability to bypass access controls, potentially causing unauthorized modification of data (integrity impact) and disruption of service (availability impact). There is no confidentiality impact reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitor vendor communications for updates. Until a fix is available, consider restricting access or applying compensating controls if feasible.