As immediate action, update the affected plugin. If you're unable to do so, ask your hosting provider or web developer for help.
Due to the nature of the vulnerability, a mitigation rule is not possible. However, it is unlikely to be mass-exploited due to the pre-requisites.
A low-privilege user can become an admin and gain full control.
CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.
This security issue has a low severity impact and is unlikely to be exploited.
Update to version 6.8.8 or later to resolve the vulnerability.
Published by Patchstack
30 Oct, 2026