This vulnerability (CVE-2024-31261) is classified as CWE-862, indicating a Missing Authorization flaw in the Announcer – Notification & message bars plugin by Aakash Chakravarthy. It affects all versions up to 6.0. The CVSS 3.1 base score is 4.3 (medium), with network attack vector, low attack complexity, requiring privileges, no user interaction, and resulting in limited integrity impact without confidentiality or availability impact. No patch or official remediation level has been published, and no known exploits have been reported.

The vulnerability allows an attacker with some level of privileges to bypass authorization controls, potentially enabling limited unauthorized modifications within the plugin's functionality. There is no impact on confidentiality or availability. The integrity impact is limited, meaning the attacker might alter some data or settings but cannot fully compromise the system or data confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently provided, users should monitor for updates from the vendor or security advisories. Until a patch is available, restrict plugin access to trusted users only and review user privileges carefully to minimize risk.