The vulnerability identified as CVE-2024-32514 in the WP Poll Maker plugin involves CWE-434: Unrestricted Upload of File with Dangerous Type. This allows an attacker with low privileges to upload files that could be executed or otherwise abused, leading to severe impacts including full system compromise. The CVSS v3.1 base score is 9.9, reflecting network attack vector, low attack complexity, no user interaction, and complete impact on confidentiality, integrity, and availability. The affected versions include all versions up to 3.4. No patch or official remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation could allow an attacker to upload and execute malicious files on the affected system, resulting in full compromise of confidentiality, integrity, and availability. This could lead to unauthorized access, data theft, data modification, or denial of service conditions. The vulnerability requires only low privileges and no user interaction, increasing the risk of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict file upload permissions and monitor for suspicious file uploads. Avoid using affected versions of WP Poll Maker if possible. Follow vendor communications for updates on patches or mitigations.