CVE-2024-37941

The Internal Link Juicer: SEO Auto Linker for WordPress plugin through version 2.24.3 contains a cross-site request forgery vulnerability stemming from insufficient nonce verification in the ilj_rebuild_index and ilj_render_batch_info functions. An attacker could exploit this flaw to execute these functions without authorization by deceiving a site administrator into clicking a malicious link or visiting a compromised page. The vulnerability was patched in version 2.24.4.

Based on public CVE data (MITRE/NVD).