CVE-2024-43937 is a CWE-862 Missing Authorization vulnerability in the Themeum WP Crowdfunding plugin for WordPress, affecting versions through 2.1.10. The flaw arises from improperly configured access control, allowing users with limited privileges to perform unauthorized actions. The CVSS 3.1 base score is 6.4 (medium), with network attack vector, low attack complexity, requiring privileges, no user interaction, and causing a scope change with integrity and availability impacts but no confidentiality loss. No official patch or vendor advisory is currently available to confirm remediation status.

The vulnerability can lead to unauthorized modification or disruption of the affected system's integrity and availability. Confidential data confidentiality is not impacted. Since the flaw involves missing authorization checks, attackers with some level of privileges could escalate their capabilities or cause denial of service conditions. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to trusted users and monitor for unusual activity related to the WP Crowdfunding plugin. Avoid granting unnecessary privileges to users to reduce risk exposure.