This vulnerability (CVE-2024-32600) affects the Averta Master Slider plugin through version 3.9.5 and is classified as CWE-502: Deserialization of Untrusted Data. It allows an attacker to potentially execute malicious code or cause denial of service by manipulating serialized data inputs. The CVSS 3.1 base score is 8.3, reflecting network attack vector, high complexity, no privileges required, user interaction required, and complete impact on confidentiality, integrity, and availability. No patch or official remediation level has been published by the vendor as of the data provided.

Successful exploitation could allow remote attackers to execute arbitrary code, alter data, or disrupt service availability in affected installations of Master Slider. The vulnerability affects confidentiality, integrity, and availability to a high degree. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting exposure of the affected plugin and monitor for updates from Averta. No vendor-provided mitigations or temporary fixes are currently documented.