The vulnerability identified as CVE-2024-49698 involves missing authorization controls in the PriceListo Best Restaurant Menu plugin for WordPress, affecting versions up to 1.4.2. This issue permits users with low privileges to execute actions that should be restricted, leading to limited integrity impact without affecting confidentiality or availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and unchanged scope. No official patch or vendor advisory has been provided yet.

The vulnerability allows unauthorized users with limited privileges to perform actions that could modify data or settings within the plugin, impacting data integrity. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict access to users with minimal privileges and monitor plugin usage closely. Avoid granting unnecessary permissions to users interacting with the plugin.