The vulnerability CVE-2024-54310 affects the Gou Manage My Account Menu plugin (versions up to 1.0.1.8) by Aslam Khan Gouran. It is a missing authorization issue where functionality is accessible without proper ACL enforcement, potentially allowing unauthorized users to perform actions they should not be able to. The CVSS score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No known exploits or patches are currently reported.

This vulnerability allows unauthorized users to access and potentially manipulate functionality within the Gou Manage My Account Menu plugin that should be restricted. While there is no confidentiality or availability impact, the integrity of the affected system or data could be compromised. No evidence of exploitation in the wild is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the affected functionality through other means, such as web application firewalls or access controls at the network level. Monitor official channels for updates or patches from the vendor.