The vulnerability identified as CVE-2024-43260 in Creative Motion Clearfy Cache involves missing authorization controls (CWE-862). This means that certain functions within the Clearfy Cache plugin can be accessed or executed without verifying if the user has the appropriate permissions. The issue affects all versions up to 2.2.4. The CVSS v3.1 base score is 5.4, reflecting a network attack vector with low complexity, requiring low privileges, no user interaction, and impacts confidentiality and integrity to a limited extent. No patch or official remediation level has been disclosed by the vendor, and the product is not a cloud service, so remediation depends on vendor updates or user action.

Successful exploitation of this vulnerability could allow an attacker with low privileges to perform unauthorized actions within the Clearfy Cache plugin, potentially leading to limited confidentiality and integrity impacts. There is no indication of availability impact. No known exploits have been reported in the wild, suggesting limited active exploitation currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to the Clearfy Cache plugin to trusted administrators only and monitor for unusual activity related to cache management functions. Avoid granting unnecessary privileges to users who do not require access to this plugin.