The vulnerability identified as CVE-2024-51642 affects the Seo Free plugin by ivan9146, versions up to 1.4. It is a Cross-Site Request Forgery (CSRF) issue that enables stored Cross-Site Scripting (XSS) attacks. The CVSS 3.1 base score is 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed. The impact includes low confidentiality, integrity, and availability impacts. No patch or vendor advisory is currently provided, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow an attacker to execute stored XSS attacks via CSRF, potentially leading to unauthorized actions performed on behalf of authenticated users, data manipulation, or service disruption. The CVSS score reflects partial impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or limiting use of the Seo Free plugin or applying any recommended temporary mitigations from the vendor. Monitor official channels for updates regarding patches or workarounds.