The vulnerability identified as CVE-2024-54268 affects the SiteOrigin Widgets Bundle plugin, specifically versions up to 1.64.0. It is characterized by missing authorization controls, which means that certain actions or data may be accessible without proper permission checks. This issue stems from incorrectly configured access control security levels within the plugin. The CVSS 3.1 base score of 4.3 reflects a network attack vector with low complexity, requiring low privileges and no user interaction, resulting in limited confidentiality impact but no integrity or availability impact. No patch or official remediation guidance has been published by the vendor at this time.

The impact of this vulnerability is limited to unauthorized access due to missing authorization checks in the affected plugin. Confidentiality may be partially compromised, but there is no impact on integrity or availability. Since the vulnerability requires low privileges and no user interaction, an attacker with some level of access could exploit it to gain unauthorized access to certain plugin features or data. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict access permissions to the SiteOrigin Widgets Bundle plugin where possible. Monitor for updates from the vendor and apply patches promptly once available.