CVE-2024-1732 is a missing authorization vulnerability in the Sharkdropship & affiliate for AliExpress WordPress plugin developed by djamio1988. The vulnerability exists because the wads_removeProductFromShop() function does not perform a capability check, enabling unauthenticated attackers to delete arbitrary posts. This affects all versions up to and including 2.2.4. The CVSS 3.1 score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or official fix has been documented in the provided data.

An unauthenticated attacker can delete arbitrary posts on a WordPress site running the vulnerable Sharkdropship & affiliate for AliExpress plugin. This results in integrity loss of the affected content but does not impact confidentiality or availability. The impact is limited to unauthorized modification (deletion) of posts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to plugin functionality via other WordPress security controls or disabling the plugin if feasible to prevent exploitation.