CVE-2024-31240 is a CWE-22 path traversal vulnerability in the InfoTheme WP Poll Maker plugin for WordPress, affecting versions through 3.1. The vulnerability allows an attacker with network access and low privileges to bypass pathname restrictions, potentially leading to denial of service conditions. The CVSS v3.1 base score is 7.7, reflecting high severity due to its impact on availability and the ease of exploitation (no user interaction required). No official fix or patch has been published as of the data available.

The vulnerability impacts availability (denial of service) but does not compromise confidentiality or integrity. An attacker with low privileges can exploit this remotely without user interaction, potentially disrupting the normal operation of the WP Poll Maker plugin. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin or applying temporary mitigations if available from trusted sources. Monitor vendor communications for updates on patches or official mitigations.