This vulnerability (CVE-2024-54241) in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification version 1.5 is classified as CWE-862 (Missing Authorization). It arises from incorrectly configured access control security levels, allowing users with limited privileges to potentially access or modify resources beyond their authorization. The CVSS 3.1 base score is 6.5 (medium), reflecting network attack vector, low attack complexity, required privileges, user interaction, and impacts on confidentiality, integrity, and availability. No patch or official fix has been released, and the vendor has not provided remediation details. The product is not a cloud service, so remediation depends on vendor updates or user action.

The vulnerability can lead to unauthorized access or modification of data or functionality within the affected plugin, impacting confidentiality, integrity, and availability. Because it involves missing authorization checks, attackers with some level of access could escalate privileges or perform actions not intended for their role. However, there are no known exploits reported in the wild, and the impact is limited to the affected plugin environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should monitor the vendor's communications for updates. Until a patch is released, consider restricting access to the plugin's administrative functions to trusted users only and review user privileges carefully to minimize risk.