The vulnerability CVE-2024-35747 in wpdevart Contact Form Builder, Contact Widget is classified as CWE-307, indicating improper restriction of excessive authentication attempts. This weakness can enable attackers to bypass intended functionality by repeatedly attempting authentication without sufficient rate limiting or lockout mechanisms. The affected versions include all releases up to 2.1.7. The CVSS v3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and impacts integrity but not confidentiality or availability. No official patch or vendor advisory detailing remediation is currently available.

The vulnerability allows an attacker to bypass authentication-related functionality by exploiting insufficient restrictions on repeated authentication attempts. This can lead to integrity impacts such as unauthorized actions or access bypass within the plugin's context. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from the vendor. No specific temporary mitigations or workarounds have been documented at this time.