The vulnerability identified as CVE-2024-49627 is a CWE-352 Cross-Site Request Forgery issue in the Noor Alam WordPress Image SEO plugin, affecting versions through 1.1.4. It allows attackers to trick authenticated users into submitting unwanted requests, potentially causing limited integrity impact. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity and requiring user interaction but no privileges. No patch or vendor advisory is currently available, and no exploits are known in the wild.

An attacker can exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions within the WordPress Image SEO plugin, potentially altering plugin settings or data. The impact is limited to integrity with no confidentiality or availability effects reported. The medium severity score reflects the need for user interaction and the absence of privilege requirements.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider minimizing exposure by restricting plugin usage to trusted users and environments. Monitor official Noor Alam or WordPress plugin channels for updates or patches addressing this vulnerability.