The vulnerability identified as CVE-2024-32830 in ThemeKraft BuddyForms is a CWE-22 path traversal issue. It allows attackers to bypass directory restrictions by manipulating pathnames, potentially enabling server-side request forgery and relative path traversal. This can lead to unauthorized access to restricted files or resources on the server. The issue affects BuddyForms versions up to 2.8.8. The CVSS 3.1 base score is 8.6, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact without integrity or availability impact. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to access restricted files or resources on the server, potentially exposing sensitive information. The CVSS score of 8.6 indicates a high impact on confidentiality. There is no indication of integrity or availability impact. No known exploits are reported in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor ThemeKraft's communications for updates. Applying general security best practices such as restricting file permissions and limiting exposure of the affected plugin may reduce risk but are not specific mitigations for this vulnerability.