CVE-2024-32777: 
WordPress vulnerability analysis and mitigation

A Missing Authorization vulnerability (CVE-2024-32777) was discovered in BizSwoop's BizPrint WordPress plugin, affecting versions up to 4.3.39. The vulnerability was reported on April 22, 2024, and was identified as a broken access control issue (Patchstack).

The vulnerability has been classified as a Missing Authorization (CWE-862) issue with a CVSS v3.1 base score of 7.5 (High). The vulnerability vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating network accessibility, low attack complexity, no privileges required, and no user interaction needed (Patchstack).

The vulnerability is considered highly dangerous and expected to become mass exploited. It allows unprivileged users to execute certain higher privileged actions, potentially leading to unauthorized access to sensitive information (Patchstack).

The vulnerability can be exploited by unauthenticated users, making it particularly concerning. No user interaction is required for exploitation, and the attack complexity is considered low (Patchstack).

The vulnerability has been fixed in version 4.5.4 of the BizPrint plugin. Users are strongly advised to update to this version or later immediately. For Patchstack users, a virtual patch has been issued to mitigate this issue by blocking potential attacks until the update can be applied (Patchstack).