CVE-2024-35635 is a CWE-918 SSRF vulnerability in the Ninja Tables WordPress plugin by WPManageNinja LLC, affecting versions up to 5.0.9. The vulnerability enables an attacker with high privileges to cause the server to make unauthorized requests, which could lead to partial confidentiality and integrity compromise. The CVSS 3.1 vector indicates network attack vector, high attack complexity, required privileges, no user interaction, and scope change. No patch or official remediation level has been disclosed as of the publication date.

The vulnerability allows an attacker with high privileges to perform SSRF attacks, potentially accessing or manipulating internal resources or data that the server can reach. The impact is limited to partial confidentiality and integrity loss, with no availability impact reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict high-privilege user access to trusted personnel and monitor for suspicious activity related to server requests initiated by the plugin. Avoid exposing the vulnerable plugin in sensitive environments where SSRF could lead to further compromise.