The vulnerability CVE-2026-32343 is a CSRF issue in the Magazine3 Easy Table of Contents plugin for WordPress, affecting versions up to 2.0.80. It allows an attacker to induce an authenticated user to perform unintended actions via crafted requests. The CVSS vector indicates it is network exploitable without privileges but requires user interaction, with no impact on confidentiality or availability and limited impact on integrity. No vendor advisory or patch information is provided in the data.

The impact is limited to integrity, as the vulnerability could allow unauthorized actions to be performed by an authenticated user without their consent. There is no direct confidentiality or availability impact reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible, or limiting plugin usage to trusted environments. Monitor vendor channels for updates.