This vulnerability is a CSRF issue in the Currency per Product for WooCommerce plugin by Tyche Softwares, affecting versions up to 1.6.0. It allows attackers to induce authenticated users to perform unintended actions via crafted requests. The vulnerability does not require privileges and has a low complexity to exploit but requires user interaction. Confidentiality and availability impacts are not present; the impact is limited to integrity. No vendor advisory or patch is currently available.

The vulnerability could allow an attacker to perform unauthorized actions on behalf of an authenticated user, potentially altering plugin settings or behavior. There is no impact on confidentiality or availability. The overall impact is limited to integrity with medium severity as per the CVSS score of 4.3. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible. Monitoring for updates from Tyche Softwares is recommended to apply an official fix once available.