CVE-2024-38721 is a CWE-862 Missing Authorization vulnerability in the spider-themes EazyDocs plugin (up to version 2.5.0). The issue arises from improperly configured access control mechanisms, which may allow users with limited privileges to perform unauthorized actions. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. There is no vendor advisory or patch available at this time.

The vulnerability can lead to unauthorized modification or disruption of the EazyDocs plugin's functionality, impacting the integrity and availability of the affected system. Confidentiality is not affected. Since no known exploits are reported, the immediate risk is theoretical but significant due to the high CVSS score.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin features to trusted users only and monitor for unusual activity related to EazyDocs. Avoid granting unnecessary privileges that could be exploited due to this missing authorization issue.