The vulnerability CVE-2026-32343 concerns a CSRF issue in the Magazine3 Easy Table of Contents plugin for WordPress, affecting versions up to 2.0.80. It allows attackers to induce authenticated users to execute unintended actions by exploiting insufficient request validation. The CVSS vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact. No patch or official fix information is currently available.

An attacker could potentially cause an authenticated user to perform unintended actions within the Easy Table of Contents plugin context, leading to limited integrity impact. There is no impact on confidentiality or availability. The vulnerability requires user interaction and no privileges, which limits the scope of exploitation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider restricting access to the plugin's administrative functions and avoid interacting with untrusted links or sites that could trigger CSRF attacks. Monitor vendor channels for updates regarding a fix.