CVE-2024-30468 is a CSRF vulnerability in the All In One WP Security & Firewall plugin for WordPress, affecting versions through 5.2.6. The vulnerability allows attackers to induce authenticated users to perform unintended actions via crafted requests. The CVSS 3.1 base score is 4.3 (medium), with network attack vector, low attack complexity, no privileges required, and user interaction needed. The vulnerability impacts integrity but not confidentiality or availability. No patch or official remediation level has been published by the vendor as of the data provided.

The vulnerability could allow attackers to cause authenticated users to perform unintended actions, potentially altering plugin settings or configurations. There is no impact on confidentiality or availability. The overall severity is medium based on the CVSS score of 4.3. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with user interactions and consider limiting exposure to untrusted content that could trigger CSRF attacks. Monitor official vendor channels for updates.