The vulnerability identified as CVE-2024-31423 in the WP Accessibility Helper (WAH) plugin is classified under CWE-862 (Missing Authorization). It affects all versions up to 0.6.2.5 and allows users with some privileges to bypass authorization checks, potentially enabling unauthorized modification of data or settings within the plugin. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring privileges, no user interaction, and limited impact on integrity without affecting confidentiality or availability. No vendor advisory or patch information is currently available.

The vulnerability could allow an attacker with limited privileges to perform unauthorized actions that modify information within the WP Accessibility Helper plugin. There is no impact on confidentiality or availability reported. The medium severity score reflects the limited scope and impact of the issue. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict user privileges to the minimum necessary and monitor for any unusual activity related to the plugin. Avoid granting elevated privileges to untrusted users. Follow updates from the vendor or trusted security sources for any forthcoming patches.