This vulnerability is a CSRF issue in the Themeisle Multiple Page Generator Plugin – MPG, affecting versions up to 3.4.0. It allows attackers to perform unauthorized actions by exploiting the trust a web application has in the authenticated user. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity and availability but not confidentiality. No patch or official remediation level has been published as of the data provided.

The vulnerability can lead to limited integrity and availability impacts by enabling attackers to cause unintended actions on behalf of authenticated users. Confidentiality is not affected. There are no known active exploits in the wild, reducing immediate risk but the medium severity indicates a moderate threat if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or limiting plugin usage to trusted environments. Monitor official Themeisle communications for updates on fixes.