This vulnerability is a CSRF issue in the Builder for WooCommerce reviews shortcodes – ReviewShort plugin by Saleswonder Team: Tobias. It affects all versions up to 1.01.3. The vulnerability allows an attacker to trick an authenticated user into submitting unintended requests, potentially leading to limited integrity impact. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. There is no confidentiality or availability impact reported.

The impact is limited to potential integrity issues caused by unauthorized actions performed via CSRF. There is no impact on confidentiality or availability. The medium CVSS score reflects the requirement for user interaction and the lack of privilege needed to exploit the vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests related to the affected plugin. Monitoring vendor channels for updates is recommended.