CVE-2024-9931 is an authentication bypass vulnerability in the Wux Blog Editor WordPress plugin (up to version 3.0.0). The issue arises from inadequate validation of the autologin token, enabling unauthenticated attackers to gain administrator access by logging in as the first admin user. This vulnerability is categorized as CWE-288 and has a CVSS 3.1 base score of 9.8, indicating critical severity with network attack vector, no privileges required, no user interaction, and full confidentiality, integrity, and availability impact.

Successful exploitation allows an unauthenticated attacker to bypass authentication controls and gain administrator-level access to the WordPress site using the Wux Blog Editor plugin. This can lead to full compromise of the affected site, including data theft, site defacement, or further malicious activity. The critical CVSS score reflects the high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or uninstalling the Wux Blog Editor plugin if possible to prevent exploitation. Monitor vendor channels for updates and apply patches promptly once available.