CVE-2024-22136 is a CSRF vulnerability affecting DroitThemes Droit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder up to version 3.1.5. This vulnerability allows an attacker to trick an authenticated user into submitting unwanted requests, potentially leading to unauthorized actions with the user's privileges. The vulnerability has a CVSS 3.1 base score of 4.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and user interaction required. There is no indication of confidentiality or availability impact, only integrity impact is noted.

The vulnerability could allow attackers to induce authenticated users to perform unintended actions, potentially altering data or settings within the affected plugin. There is no reported impact on confidentiality or availability. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying nonce tokens or restricting access to trusted users. Monitor official DroitThemes channels for updates or patches addressing this vulnerability.