The vulnerability identified as CVE-2024-56004 affects the Easy Site Importer plugin by awfowler, specifically versions up to 1.0.1. It is caused by missing authorization checks, which result in improperly configured access control security levels. This allows users with some privileges (low privileges) to perform actions that should be restricted, impacting the integrity and availability of the system. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no user interaction, requiring low privileges. Confidentiality is not affected.

The vulnerability can lead to unauthorized modification or disruption of the affected system's functionality due to missing authorization controls. While confidentiality is not impacted, integrity and availability may be compromised. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible to limit exposure. Monitor vendor channels for updates regarding patches or official mitigations.