The Paid Memberships Pro plugin for WordPress, specifically versions up to 2.12.10, is vulnerable to CSRF due to missing nonce validation in the pmpro_lifter_save_streamline_option() function. This flaw allows an attacker to craft a malicious request that, when executed by an authenticated site administrator (e.g., by clicking a link), enables the streamline setting with Lifter LMS without proper authorization. The vulnerability is identified as CWE-352 and has a CVSS 3.1 base score of 4.3, indicating medium severity. There is no vendor advisory or patch link provided, and no known exploits in the wild have been reported.

An attacker can cause an authenticated administrator to unknowingly enable a specific setting (streamline setting with Lifter LMS) via a forged request. This could lead to unintended configuration changes but does not directly compromise confidentiality or availability. The impact is limited to integrity with no direct data disclosure or denial of service reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should avoid clicking on untrusted links while logged into the WordPress admin interface and consider implementing additional CSRF protections or monitoring plugin updates from strangerstudios.