The vulnerability identified as CVE-2024-48044 affects ShortPixel Image Optimizer versions up to 5.6.3. It is caused by missing authorization checks, which result in incorrectly configured access control security levels. This allows users with some level of privilege to perform actions that should be restricted, potentially leading to integrity and availability impacts. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and requires low privileges but no user interaction. Confidentiality impact is none, integrity impact is low, and availability impact is low.

Exploitation of this vulnerability could allow an attacker with limited privileges to perform unauthorized actions within the ShortPixel Image Optimizer plugin, potentially affecting the integrity and availability of the system where the plugin is installed. There is no impact on confidentiality. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations related to the ShortPixel Image Optimizer plugin to limit exposure. Monitor vendor communications for updates on patches or official mitigations.