The vulnerability identified as CVE-2024-54382 involves improper limitation of a pathname to a restricted directory in the Bold Page Builder plugin (versions up to 5.1.5). This path traversal issue could allow an attacker with high privileges to read files outside the intended directory scope. The CVSS 3.1 base score is 4.9, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No patch or mitigation details are provided in the available data.

An attacker with high privileges could exploit this vulnerability to read sensitive files outside the restricted directories, potentially exposing confidential information. There is no indication of integrity or availability impact. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Bold Page Builder plugin to trusted users only and monitor for updates from the vendor.