The vulnerability CVE-2024-32101 is a CSRF issue in the Omnisend Email Marketing for WooCommerce plugin (versions up to 1.14.3). It enables attackers to trick authenticated users into submitting unauthorized requests that could alter plugin behavior or settings. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact. No patch or official remediation details are currently provided.

The impact is limited to integrity with no confidentiality or availability effects. An attacker could cause a logged-in user to perform unintended actions within the plugin, potentially altering configurations or marketing settings. However, exploitation requires user interaction and the user must be authenticated. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted links and avoid clicking suspicious URLs while authenticated in the affected plugin. Monitor vendor channels for updates and apply patches promptly once available.