This vulnerability (CVE-2024-32431) in WP All Import's Import Users from CSV plugin is classified as CWE-502: Deserialization of Untrusted Data. It affects versions up to 1.2 and allows an attacker with high privileges and network access to potentially manipulate deserialized data, impacting confidentiality and integrity. The CVSS 3.1 vector indicates that exploitation requires high attack complexity, privileges, and no user interaction, with a scope change. No official patch or vendor advisory is currently available, and no known exploits have been reported.

Successful exploitation could lead to partial loss of confidentiality and integrity of data processed by the Import Users from CSV plugin. The attack requires high privileges and network access, limiting the risk to privileged users. There is no indication of availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and limit privileges to trusted users only. Monitor for updates from the vendor or security advisories regarding patches or temporary mitigations.