CVE-2026-24365 is a CSRF vulnerability in the Stock Manager for WooCommerce plugin (storeapps) affecting all versions before 3.6.0. The vulnerability enables unauthorized commands to be transmitted from a user that the web application trusts, potentially leading to limited integrity and availability impacts. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. No patch or official fix information is currently available.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions on behalf of a logged-in user, potentially modifying stock data or causing denial of service conditions. The impact is limited to integrity and availability with no confidentiality loss indicated. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying request origins or using security plugins that add CSRF tokens. Monitor vendor channels for updates and apply patches promptly once available.