CVE-2024-33917: 
WordPress vulnerability analysis and mitigation

The CVE-2024-33917 is an Authentication Bypass by Spoofing vulnerability affecting the WordPress WTI Like Post plugin versions through 1.4.6. The vulnerability was discovered by researcher Mika and was published on April 29, 2024 (Patchstack Database).

The vulnerability is classified as a bypass vulnerability that could allow attackers to bypass IP restrictions in the plugin. It has been assigned a CVSS v3.1 base score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. The vulnerability is tracked under CWE-290 (Authentication Bypass by Spoofing) (Patchstack Database).

The vulnerability allows unauthenticated attackers to bypass certain functionality restrictions in the plugin. The impact is considered low severity as it primarily affects the integrity of the system without compromising confidentiality or availability (Patchstack Database).

The vulnerability can be exploited by unauthenticated users and requires low attack complexity. No user interaction is needed to exploit this vulnerability (Patchstack Database).

Currently, there is no official fix available for this vulnerability. The security issue has been assessed as having a low severity impact and is considered unlikely to be exploited (Patchstack Database).