This vulnerability (CVE-2024-24796) is classified as CWE-502: Deserialization of Untrusted Data in the MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently WordPress plugin. It affects all versions up to 4.1.1. The issue allows an attacker with low privileges and no user interaction to potentially compromise confidentiality and integrity of the affected system. The CVSS 3.1 base score is 8.2, indicating a high severity with network attack vector, high attack complexity, and partial privileges required. No patch or official fix information is currently available.

Successful exploitation could lead to a complete compromise of confidentiality and integrity of the affected WordPress plugin environment. The vulnerability does not impact availability. There are no known active exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor MagePeople Team advisories and update the plugin once a fix is released. In the meantime, consider restricting access to the plugin functionality to trusted users only and applying standard WordPress security best practices relevant to plugin management.