The vulnerability identified as CVE-2024-32684 affects the Wpmet Wp Ultimate Review plugin through version 2.2.5. It is classified as CWE-862, indicating missing authorization controls. This means that the plugin does not properly verify whether a user is authorized to perform certain actions, potentially allowing unauthorized users to modify data or perform actions that should be restricted. The CVSS v3.1 base score is 5.3, with network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to integrity without confidentiality or availability impact.

The impact of this vulnerability is limited to integrity, meaning unauthorized users could potentially alter or manipulate data within the plugin's scope. There is no impact on confidentiality or availability reported. Since no known exploits are currently in the wild, the immediate risk appears moderate but could increase if exploitation techniques emerge.

As of the current information, no official patch or remediation is available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should monitor official Wpmet communications for updates and consider restricting access to the plugin's functionality where possible to reduce exposure.