The vulnerability identified as CVE-2024-32802 affects the WordPlus BP Better Messages plugin, versions up to 2.4.32. It is classified as CWE-862, which means there is missing authorization, allowing users to access functionality without proper ACL enforcement. The CVSS 3.1 base score is 5.3, with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity loss without confidentiality or availability impact. No patch or official remediation level has been disclosed by the vendor or authoritative sources.

Exploitation of this vulnerability could allow an attacker to perform actions or access features within BP Better Messages that should be restricted, potentially leading to unauthorized modification of data or functionality. However, there is no impact on confidentiality or availability reported. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are documented at this time.