The vulnerability identified as CVE-2024-34824 in ThemeBoy's SportsPress – Sports Club & League Manager plugin is classified under CWE-862 (Missing Authorization). It affects versions through 2.7.20 and allows an attacker with limited privileges to bypass authorization checks, resulting in unauthorized modification of information. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring privileges, no user interaction, and impacts integrity but not confidentiality or availability. No patch or official remediation level has been disclosed by the vendor as of the publication date.

The impact of this vulnerability is limited to unauthorized modification of data within the SportsPress plugin environment by users who have some level of privileges but should not have authorization for certain actions. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict user privileges to the minimum necessary and monitor for unusual modification activities within the SportsPress plugin. Avoid granting elevated privileges to untrusted users.