This vulnerability (CVE-2024-34810) in Extend Themes Skyline WP is classified as CWE-352, indicating a Cross-Site Request Forgery issue. It affects Skyline WP versions through 1.0.10. The vulnerability allows attackers to perform unauthorized actions on behalf of authenticated users by exploiting the lack of proper CSRF protections. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, no privileges required, user interaction required, and limited impact on integrity without affecting confidentiality or availability. No vendor advisory or patch information is currently available, and the product is not a cloud service.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions within the Skyline WP plugin. The impact is limited to integrity with no confidentiality or availability impact. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing additional CSRF protections at the application or web server level if possible, or restrict access to trusted users only. Monitor vendor channels for updates.