This vulnerability is a CSRF issue in the YITH WooCommerce Compare plugin for WordPress, affecting versions up to 2.37.0. It enables attackers to induce authenticated users to perform actions without their consent by exploiting the lack of proper request validation. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and no privileges required, but user interaction is necessary. The impact is limited to integrity, with no confidentiality or availability impact reported.

The vulnerability allows attackers to cause authenticated users to unknowingly execute unwanted actions within the affected plugin, potentially altering data or settings. There is no impact on confidentiality or availability. The medium severity rating reflects the limited scope of the integrity impact and the requirement for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible. Monitoring vendor channels for updates is recommended.