The vulnerability identified as CVE-2024-52444 affects the wpopal Opal Woo Custom Product Variation plugin for WooCommerce, specifically versions up to 1.1.3. It is classified as an improper limitation of a pathname to a restricted directory, commonly known as a path traversal vulnerability. This flaw allows an attacker to manipulate file paths to access files outside the intended directory scope. According to the CVSS vector, the attack can be performed remotely without privileges or user interaction, and it results in a high impact on availability, though confidentiality and integrity are not affected. No patch or official vendor advisory is currently available, and no exploits have been observed in the wild.

The vulnerability allows remote attackers to perform path traversal attacks that can lead to denial of service or disruption of availability of the affected system. Confidentiality and integrity are not impacted according to the CVSS vector. No known exploits have been reported, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from the vendor and consider restricting access to the plugin or disabling it if feasible to reduce exposure.