CVE-2024-1733 is a missing authorization vulnerability in the Word Replacer Pro WordPress plugin by charlestsmith. The issue arises because the word_replacer_ultra() function does not perform capability checks, enabling unauthenticated users to update arbitrary content on the site. This affects all versions up to and including 1.0. The vulnerability has a CVSS score of 5.3, reflecting a medium severity level due to network attack vector, no privileges required, and no user interaction needed. No patch or vendor advisory is currently available to confirm remediation status.

An attacker without authentication can modify content on the affected WordPress site, potentially leading to unauthorized content changes. There is no indication of confidentiality or availability impact. The integrity of site content is compromised, which may affect site trustworthiness and user experience.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Word Replacer Pro plugin or disable it if possible to prevent exploitation. Monitor official channels for updates from the vendor charlestsmith regarding patches or mitigations.