The vulnerability identified as CVE-2024-49686 affects the Landing Page Cat plugin by fatcatapps. It is a missing authorization issue that impacts versions up to 1.7.4. This means that certain operations within the plugin can be performed by users who should not have the required permissions, potentially allowing limited unauthorized modification or disruption of service. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is limited to integrity and availability, with no confidentiality impact reported.

The vulnerability allows users with low privileges to perform unauthorized actions, which can lead to limited integrity and availability issues within the affected plugin. There is no confidentiality impact. No known exploits have been reported in the wild, so the practical impact may currently be limited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict access to the affected plugin to trusted users only and consider disabling or removing the plugin if possible to reduce risk.