The vulnerability identified as CVE-2024-53803 affects the WP Mailster plugin by brandtoss, specifically versions up to 1.8.16.0. It is caused by missing authorization checks, leading to incorrect access control configurations. This can be exploited remotely with low attack complexity and requires low privileges but no user interaction. The impact is limited to availability, with no confidentiality or integrity loss indicated. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, reflecting network attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows an attacker with low privileges to exploit missing authorization controls, potentially causing denial of service or disruption of availability in the WP Mailster plugin. There is no impact on data confidentiality or integrity. No known exploits are reported in the wild, reducing immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from brandtoss and consider restricting access to the affected plugin functionalities to trusted users only.