An Incorrect Privilege Assignment vulnerability exists in Tobias WP2LEADS plugin versions up to 3.5.17, allowing privilege escalation. This flaw enables an attacker to gain elevated privileges beyond what is intended by the application. The vulnerability has a CVSS v3.1 score of 7.3, indicating a high severity level.