The vulnerability identified as CVE-2024-37464 affects WPZOOM Beaver Builder Addons through version 1.3.5. It is classified as CWE-22, indicating improper limitation of a pathname to a restricted directory, commonly known as a path traversal issue. This vulnerability allows an attacker with high privileges to read files outside the designated directory boundaries, potentially exposing sensitive information. The CVSS 3.1 base score is 4.9, reflecting network attack vector, low attack complexity, required high privileges, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No patch or official remediation has been disclosed by WPZOOM as of the published date.

An attacker with high privileges can exploit this vulnerability to read files outside the intended restricted directories, potentially leading to unauthorized disclosure of sensitive information. There is no indication of integrity or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict high-privilege user access to trusted individuals only and monitor for suspicious activity related to file access. Avoid exposing the affected plugin in untrusted environments.