CVE-2024-31944 is a CSRF vulnerability in the Octolize WooCommerce UPS Shipping – Live Rates and Access Points plugin, affecting versions up to 2.2.4. The vulnerability enables attackers to induce authenticated users to perform unintended actions without their consent. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or official remediation level has been disclosed by the vendor as of the publication date.

The vulnerability allows an attacker to cause an authenticated user to perform unintended actions within the affected plugin, potentially leading to limited integrity impact. There is no impact on confidentiality or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted links or sites that could trigger CSRF attacks. Monitor official Octolize communications for updates on patches or mitigations.