This vulnerability in the raratheme Preschool and Kindergarten plugin (versions up to 1.2.1) allows Cross-Site Request Forgery (CSRF) attacks. CSRF vulnerabilities enable attackers to induce users to perform actions they did not intend, potentially leading to unauthorized state changes. The CVSS 3.1 vector indicates the attack requires network access, no privileges, and user interaction, with low complexity and limited impact on integrity but no impact on confidentiality or availability.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions within the affected plugin. The impact is limited to integrity with no confidentiality or availability impact. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted users. Monitor the vendor's channels for updates regarding patches or official mitigations.