CVE-2024-37443 is a CWE-862 missing authorization vulnerability in the WP Job Manager - Resume Manager plugin by Automattic, affecting versions through 2.1.0. The issue arises from improperly configured access control, allowing users with some privileges to perform unauthorized actions that could modify data (integrity impact) without requiring user interaction. The vulnerability has a CVSS 3.1 base score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). No patch or official remediation level has been disclosed by the vendor.

The vulnerability allows an attacker with some level of privileges (PR:L) to perform unauthorized actions that can alter data integrity within the WP Job Manager - Resume Manager plugin. There is no impact on confidentiality or availability. No known exploits are reported in the wild, so the immediate risk appears limited but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations related to WP Job Manager - Resume Manager to limit privilege escalation opportunities. Monitor for vendor updates or patches addressing this vulnerability.