The vulnerability identified as CVE-2024-34763 involves missing authorization checks in the Builder for WooCommerce reviews shortcodes – ReviewShort plugin by Saleswonder Team: Tobias. This issue affects all versions up to 1.01.5, allowing unauthenticated users to perform actions without proper permission validation. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or official fix has been documented in the provided data.

The vulnerability allows unauthorized users to perform actions that should require authorization, potentially leading to integrity issues within the affected plugin's functionality. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from Saleswonder Team: Tobias and consider restricting access to affected plugin functionalities where possible.