This vulnerability (CVE-2024-30482) is classified as CWE-352, indicating a Cross-Site Request Forgery issue in the Simple Revisions Delete plugin by Brice CAPOBIANCO. The affected versions include all versions up to 1.5.3. The vulnerability allows remote attackers to induce authenticated users to execute unwanted actions without their consent. The CVSS 3.1 vector indicates the attack requires no privileges but does require user interaction. The impact is limited to integrity loss without confidentiality or availability impact. No official fix or patch has been disclosed, and no known exploitation has been reported.

The vulnerability could allow attackers to perform unauthorized actions on behalf of authenticated users, potentially modifying plugin settings or deleting revisions without user intent. However, it does not impact confidentiality or availability. The medium severity reflects the limited scope and requirement for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling the plugin if feasible or implementing additional CSRF protections at the application or web server level. Monitor vendor communications for updates on patches or official mitigations.