CVE-2024-4082 is a CSRF vulnerability in the Joli FAQ SEO – WordPress FAQ Plugin for WordPress, affecting all versions up to and including 1.3.2. The issue arises from missing or incorrect nonce validation during the settings save process, enabling attackers to forge requests that change plugin settings without authentication if an administrator is tricked into performing an action such as clicking a crafted link. The vulnerability has a CVSS 3.1 base score of 4.3, reflecting a medium severity level with low complexity and no privileges required but requiring user interaction.

An attacker can modify the plugin's settings without authentication by exploiting the CSRF vulnerability, potentially altering site behavior or configuration. The impact is limited to integrity as no confidentiality or availability impacts are indicated. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should exercise caution with links and requests related to the plugin settings and consider restricting administrative access or using additional CSRF protections at the site level.