CVE-2024-34820 is a CWE-862 Missing Authorization vulnerability in the If So Plugin If-So Dynamic Content Personalization (up to version 1.7.1). This vulnerability allows unauthorized network attackers to perform actions without proper authorization, impacting the integrity and availability of the affected system. The CVSS 3.1 base score is 6.5 (medium severity) with attack vector network, low attack complexity, no privileges required, no user interaction, and unchanged scope. No official patch or remediation level has been disclosed by the vendor.

The vulnerability can lead to unauthorized modification or disruption of the plugin's dynamic content personalization features, affecting the integrity and availability of the affected system. Confidentiality is not impacted according to the CVSS vector. There are no known exploits in the wild, and no vendor-provided fixes are currently available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin's administrative interfaces and monitor for unusual activity related to the plugin. Avoid exposing the plugin to untrusted networks where possible.