CVE-2024-9931 is a critical authentication bypass vulnerability found in the Wux Blog Editor plugin for WordPress, affecting versions 3.0.0 and earlier. This flaw allows unauthenticated attackers to potentially log in as the first administrator user due to inadequate validation of the token used for autologin. The absence of proper token validation makes the system susceptible to unauthorized access.

While the CVSS score is 0, indicating no direct impact, the SOCRadar Vulnerability Risk Score (SVRS) of 30 suggests a moderate level of risk. Although not critical (above 80), the 'In The Wild' tag and CWE-288 categorization signify that this vulnerability is actively being exploited, requiring immediate attention for WordPress security. Successful exploitation could lead to full site compromise, data breaches, and other malicious activities, emphasizing the need for prompt patching or mitigation.