The Change Table Prefix plugin by Manish Kumar Agarwal, up to version 2.0, contains a CSRF vulnerability (CVE-2024-25932). This vulnerability enables attackers to perform unauthorized state-changing actions by exploiting the trust of an authenticated user. The CVSS vector indicates the attack requires network access, no privileges, and user interaction, with low complexity and limited impact on integrity only. No confidentiality or availability impact is noted.

The vulnerability allows an attacker to induce an authenticated user to perform unwanted changes to the database table prefix setting, potentially leading to limited integrity impact. There is no direct confidentiality or availability impact reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests that change critical settings. Monitoring for updates from the vendor is recommended.