CVE-2024-5541 is a missing authorization vulnerability (CWE-862) in the Ibtana – WordPress Website Builder plugin for WordPress, affecting all versions up to and including 1.2.3.3. The vulnerability arises from the lack of a capability check in the 'ibtana_visual_editor_register_ajax_json_endpont' function, which allows unauthenticated attackers to update option values such as reCAPTCHA keys. This unauthorized modification can be leveraged to bypass reCAPTCHA protections on the site. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity. No patch or official fix has been documented in the provided data, and no exploits are currently known to be active in the wild.

An attacker without authentication can modify site options related to reCAPTCHA keys, potentially bypassing reCAPTCHA protections. This could reduce the effectiveness of anti-bot measures on the affected WordPress site, possibly allowing automated abuse or spam. There is no indication of direct confidentiality or availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, site administrators should consider disabling or restricting access to the vulnerable plugin or its AJAX endpoints. Monitoring for updates from the vendor or WordPress plugin repository is recommended to apply any forthcoming patches promptly.