The vulnerability identified as CVE-2024-47308 affects the WPDeveloper Templately plugin, specifically versions up to 3.1.2. It is characterized by missing authorization controls, which means that the plugin does not properly verify whether a user has the necessary permissions before allowing certain actions. The CVSS v3.1 base score is 6.5, with the vector indicating network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

An attacker can exploit this vulnerability remotely without authentication or user interaction to perform unauthorized actions that impact the integrity and availability of the affected system. There is no confidentiality impact reported. The medium severity score reflects the potential for limited but meaningful disruption or modification of data or service availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is currently documented, users should monitor WPDeveloper's official channels for updates. Until a fix is available, consider limiting exposure of the affected plugin to untrusted users or networks where feasible.