CVE-2024-4745 is classified as CWE-862 (Missing Authorization) in the Giveaways and Contests by RafflePress plugin for WordPress, affecting versions through 1.12.4. The vulnerability allows an attacker with some level of privileges to bypass authorization controls, potentially enabling unauthorized actions within the plugin's functionality. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity and requiring low privileges, no user interaction, and limited confidentiality impact. No official fix or patch has been disclosed, and no known active exploitation has been reported.

The vulnerability could allow an attacker with limited privileges to perform unauthorized actions within the RafflePress plugin, potentially leading to limited confidentiality exposure. There is no impact on data integrity or availability. Since the plugin is commonly used to manage giveaways and contests, unauthorized actions could affect contest management but not system-wide compromise. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and restrict user privileges to minimize exposure. Monitor official RafflePress channels for updates and apply patches promptly once released.