This vulnerability is a CSRF issue in the Revmakx WPCal.io – Easy Meeting Scheduler plugin, affecting versions through 0.9.5.8. It enables an attacker to trick authenticated users into submitting unauthorized requests, potentially leading to limited impact on the integrity of the application. The CVSS 3.1 vector indicates the attack requires no privileges but does require user interaction. Confidentiality and availability are not impacted, only integrity is affected to a low degree. No vendor-provided patch or mitigation details are currently available.

The impact is limited to potential unauthorized actions performed by authenticated users without their intent, affecting the integrity of the application. There is no impact on confidentiality or availability. The medium severity score reflects the moderate risk posed by this CSRF vulnerability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing standard CSRF protections such as verifying anti-CSRF tokens in requests or limiting the exposure of the affected plugin. Monitor official Revmakx communications for updates on patches or mitigations.