This vulnerability is classified as CWE-352 (Cross-Site Request Forgery) in the TranslatePress plugin developed by Cozmoslabs and others. It affects versions through 2.7.5 and enables an attacker to trick authenticated users into submitting unwanted requests, potentially causing limited impact such as unauthorized changes to plugin settings or configurations. The CVSS vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. Confidentiality and availability impacts are not present, with only a low integrity impact noted.

The impact is limited to low integrity modifications within the TranslatePress plugin environment. There is no confidentiality or availability impact. The vulnerability requires user interaction and can be exploited remotely without authentication privileges. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying request origins or disabling vulnerable plugin features if feasible. Monitor vendor channels for updates and apply patches promptly once available.