CVE-2026-24597 is a CSRF vulnerability affecting the WpDevArt Organization chart plugin up to version 1.7.5. This vulnerability allows an attacker to trick authenticated users into submitting unauthorized requests, potentially leading to limited impact on the integrity of the application. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or official remediation level has been published by the vendor as of the publication date.

The vulnerability could allow an attacker to cause a user to perform unintended actions within the Organization chart plugin, potentially leading to limited integrity impact. There is no confidentiality or availability impact reported. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections at the application or web server level if possible, or restrict access to trusted users only. Monitor vendor communications for updates on patches or official mitigations.