The vulnerability identified as CVE-2024-54381 affects Dotstore's Advance Menu Manager plugin (versions up to 3.1.1). It is classified as a Missing Authorization issue, meaning that certain actions within the plugin do not properly verify whether the user has the necessary permissions. This can lead to unauthorized modification of data (integrity impact) by users with limited privileges. The CVSS vector indicates network attack vector, low attack complexity, privileges required are low, no user interaction needed, and the impact affects integrity and availability partially. No patch or official remediation guidance has been published yet.

An attacker with low privileges can exploit this vulnerability to perform unauthorized modifications within the Advance Menu Manager plugin, compromising data integrity and causing limited availability impact. There is no indication of confidentiality impact. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin to trusted users only and monitor for unusual activity related to menu management. Avoid granting unnecessary privileges to users who can interact with this plugin.