The vulnerability identified as CVE-2024-30458 is a CSRF issue in the WOOCS – WooCommerce Currency Switcher plugin by realmag777, affecting versions up to 1.4.1.7. CSRF vulnerabilities enable attackers to induce authenticated users to perform actions without their consent by exploiting the trust a web application has in the user's browser. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact. No patch or official remediation level has been disclosed by the vendor or authoritative sources.

An attacker could potentially cause an authenticated user to unknowingly perform actions that modify the plugin's settings or behavior, leading to integrity issues. There is no indication of confidentiality or availability impact. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible. Monitor vendor channels for updates and apply patches promptly once available.