This vulnerability is a CSRF issue in the Janis Elsts Admin Menu Editor plugin for WordPress, affecting versions up to 1.12. It allows attackers to trick authenticated users into submitting unintended requests that could alter the plugin's settings or behavior. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or official remediation level has been disclosed as of the publication date.

The vulnerability could allow an attacker to cause an authenticated administrator or user with sufficient privileges to perform unintended actions within the Admin Menu Editor plugin. This may lead to limited integrity impact such as unauthorized changes to the admin menu configuration. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting administrative access and avoid clicking on untrusted links while authenticated. Monitor official channels for updates from the vendor regarding patches or mitigations.