The vulnerability identified as CVE-2024-43345 affects PluginOps Landing Page Builder versions up to 1.5.2.0. It is classified as CWE-22, indicating improper limitation of a pathname to a restricted directory, commonly known as a path traversal flaw. This weakness allows an attacker with low privileges and no user interaction to include local files via PHP Local File Inclusion, potentially leading to full confidentiality, integrity, and availability compromise of the affected system. The CVSS 3.1 base score is 7.5, reflecting network attack vector, high impact on confidentiality, integrity, and availability, but requiring high attack complexity.

Successful exploitation could lead to an attacker including arbitrary local files on the server, which may result in disclosure of sensitive information, modification of data, or denial of service. The vulnerability impacts confidentiality, integrity, and availability of the affected system. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor PluginOps communications for updates. Applying strict input validation and restricting file inclusion paths may reduce risk but are not guaranteed mitigations for this specific vulnerability.