An unauthenticated user can register through the plugin's form and specify or exploit a higher privileged role, such as Editor, because the role assignment is not validated. This flaw allows the user to gain elevated permissions on the WordPress site without prior authentication, enabling content modification, plugin installation, or site configuration changes, thereby compromising confidentiality, integrity, and availability. The vulnerability does not grant the Administrator role.

The risk applies to installations running the WordPress User Frontend plugin from version 3.5.29 up to and including 4.3.11. It requires a PHP environment in which the sodium extension is unavailable and a registration page has been set up. Administrators must check for these conditions and ensure their plugin version is at least 4.3.12 or higher.

Because the flaw is exploitable without authentication and requires only a standard web request to the registration form, the potential impact is high. The CVSS score of 7.4 indicates high risk, and the EPSS score of < 1% suggests a low current exploitation probability, with no confirmed exploits in use according to KEV. Attackers can easily execute the flaw from any location that can reach the site, and the damage is consistent with the severity of privilege escalation.