CVE-2024-37941 is a CSRF vulnerability in the Internal Link Juicer: SEO Auto Linker WordPress plugin affecting versions through 2.24.3. The vulnerability allows attackers to trick authenticated users into submitting unintended requests, potentially leading to unauthorized changes. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and user interaction required. No official fix or patch has been announced as of the published date.

The vulnerability could allow an attacker to perform unauthorized actions on behalf of authenticated users of the plugin, potentially altering plugin settings or behavior. There is no indication of confidentiality or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider minimizing exposure by limiting user privileges and avoiding interaction with untrusted sites while authenticated. Monitor for vendor updates regarding patches or mitigations.