The vulnerability identified as CVE-2024-49321 affects the Simple Custom Post Order plugin by colorlibplugins, versions up to and including 2.5.7. It is caused by missing authorization checks, which means the plugin does not properly enforce access control for certain operations. This can potentially allow unauthorized users to perform actions that should be restricted. No patch or official fix information is currently available, and no known exploits have been reported in the wild.

The impact of this vulnerability is unauthorized access or modification of functionality within the Simple Custom Post Order plugin due to missing authorization controls. This could lead to unauthorized users manipulating post order settings or related features. However, without further details or confirmed exploitation, the exact impact scope remains limited to the plugin's access control weaknesses.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to the plugin's administrative functions to trusted users only and monitor for updates from the vendor or security advisories.