CVE-2024-12219 is a Cross-Site Request Forgery vulnerability in the Stop Registration Spam plugin for WordPress, affecting all versions up to and including 1.23. The issue arises from missing or incorrect nonce validation, which is a security mechanism designed to prevent unauthorized commands from being executed. An attacker can exploit this by tricking a site administrator into clicking a malicious link, causing the administrator's browser to perform unintended actions on the vulnerable site. This vulnerability has a CVSS 3.1 base score of 6.1, reflecting a medium impact on confidentiality and integrity but no impact on availability. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

Successful exploitation could allow an attacker to perform unauthorized actions on behalf of an authenticated administrator, potentially injecting malicious scripts or altering site behavior. The impact affects confidentiality and integrity but does not affect availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should exercise caution when clicking links and consider disabling or replacing the plugin if possible. Monitoring for updates from the plugin vendor or WordPress security advisories is recommended.