This vulnerability (CVE-2024-32602) is classified as CWE-89, indicating improper neutralization of special elements used in SQL commands, commonly known as SQL Injection. It affects the WooCommerce Multilingual & Multicurrency plugin by OnTheGoSystems, specifically versions up to 5.3.3.1. The CVSS 3.1 base score is 7.6, reflecting a network attack vector with low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact includes high confidentiality impact and low availability impact, with no integrity impact. The vulnerability is published but lacks an official fix or patch at this time.

An attacker with high privileges could exploit this SQL Injection vulnerability to compromise the confidentiality of the affected system's data and cause limited availability disruption. There is no indication of integrity impact. The vulnerability could potentially allow unauthorized data access or partial denial of service conditions. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should follow vendor communications closely. No specific temporary mitigations are provided in the available data.