This vulnerability (CVE-2024-32454) is classified as CWE-918 SSRF in the Wappointment Appointment Bookings plugin for Zoom, GoogleMeet, and related services. It affects versions up to 2.6.0. SSRF vulnerabilities allow attackers to make the server perform unauthorized requests, potentially accessing internal resources or services. The CVSS 3.1 vector indicates network attack vector, high attack complexity, requiring high privileges, no user interaction, and a scope change with limited confidentiality and integrity impact. No patch or official remediation level has been published by the vendor as of the publication date.

An attacker with high privileges could exploit this SSRF vulnerability to cause the server to make unintended requests, potentially accessing or interacting with internal or external resources. The impact is limited to partial confidentiality and integrity loss without affecting availability. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is provided, users should monitor vendor communications for updates. Until a patch is available, restrict high-privilege user access and review server request handling configurations to limit SSRF risks where possible.