This vulnerability is a CSRF issue in the Metorik – Reports & Email Automation for WooCommerce plugin (metorik-helper component) affecting versions up to 1.7.1. It allows attackers to induce authenticated users to perform unintended actions via crafted requests. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity with no confidentiality or availability impact reported. No patch or vendor advisory details are currently available.

The vulnerability could allow an attacker to cause an authenticated user to perform unintended actions, potentially altering data or settings within the Metorik plugin. There is no indication of confidentiality or availability impact. The overall severity is medium based on the CVSS score of 4.3. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens on requests or limiting exposure of the affected plugin to trusted users only. Monitor vendor channels for updates.