This vulnerability (CVE-2024-33682) is a CSRF issue in the WP GDPR Compliance plugin developed by Cookie Information A/S. It affects versions up to 2.0.23. The vulnerability allows an attacker to trick authenticated users into submitting unauthorized requests, potentially leading to limited integrity and availability impacts. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. No vendor advisory or patch information is currently provided.

The impact is limited to integrity and availability, as indicated by the CVSS vector (I:L, A:L). There is no confidentiality impact. Successful exploitation could cause unauthorized actions to be performed on behalf of an authenticated user, potentially disrupting plugin functionality or altering settings. No evidence of active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying request origins or using security plugins that mitigate CSRF risks. Monitor official channels from Cookie Information A/S for updates.