The vulnerability identified as CVE-2024-35735 in the CodePeople WP Time Slots Booking Form plugin is classified under CWE-862 (Missing Authorization). It affects versions up to 1.2.11 and allows remote attackers to perform actions or access resources without proper authorization. The CVSS 3.1 base score is 5.3 (medium severity) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and limited confidentiality impact. No patch or official remediation level has been published by the vendor as of the current data.

The vulnerability could allow unauthorized remote attackers to access or interact with the booking form functionality without proper authorization, potentially leading to limited confidentiality impact. There is no indication of integrity or availability impact. No exploits are known in the wild, so active exploitation has not been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently available, users should monitor vendor communications for updates. Until a patch is released, consider restricting access to the affected plugin's functionalities or limiting exposure to trusted users only.