This vulnerability (CVE-2024-31285) in the WordPress Tooltips plugin is classified as CWE-352 (Cross-Site Request Forgery). It allows an attacker to trick an authenticated user into submitting a forged request, which can result in stored XSS attacks. The affected versions include all versions up to 9.5.3. The CVSS 3.1 base score is 7.1, with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts to confidentiality, integrity, and availability. No official patch or remediation level has been published by the vendor or in the advisory data.

Successful exploitation of this vulnerability can lead to stored XSS, allowing attackers to execute arbitrary scripts in the context of the affected site. This can compromise user data, session tokens, or perform actions on behalf of authenticated users. The vulnerability impacts confidentiality, integrity, and availability of the affected WordPress sites using the Tooltip plugin up to version 9.5.3.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently documented, users should monitor the Tooltip plugin vendor's announcements for updates. As a temporary mitigation, consider disabling or limiting the use of the Tooltip plugin until a patch is available.