CVE-2024-32701 describes a missing authorization vulnerability in the InstaWP Connect product affecting versions up to and including 0.1.0.24. The vulnerability allows users with some level of privileges to bypass authorization controls, potentially enabling unauthorized modification of data or actions within the application. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact.

The impact is limited to integrity as unauthorized users with limited privileges may perform actions without proper authorization. There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

No official patch or remediation has been published by the vendor at this time. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to InstaWP Connect to trusted users only and monitor for unusual activity related to authorization bypass attempts.