The Shopwarden plugin for WordPress versions up to 1.0.11 contains a CSRF vulnerability due to improper nonce validation in the save_setting() function. This flaw enables attackers to perform unauthorized changes by convincing an administrator to perform an action, such as clicking a malicious link. The vulnerability can result in privilege escalation by updating arbitrary plugin options without authentication. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

An attacker can exploit this vulnerability to update arbitrary options within the plugin by tricking an authenticated administrator into performing a forged request. This can lead to privilege escalation and potentially full compromise of the affected WordPress site’s plugin settings, impacting confidentiality, integrity, and availability of the system. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should exercise caution by limiting administrator access and avoiding clicking on untrusted links. Monitoring for updates from the Shopwarden plugin vendor is recommended to apply any forthcoming patches promptly.