This vulnerability is a CSRF issue in Softaculous SpeedyCache plugin versions up to 1.1.8. It enables attackers to trick authenticated users into executing unintended actions by leveraging the user's authenticated session. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity and availability with no confidentiality loss. No patch or official remediation guidance is currently documented.

The vulnerability may allow attackers to cause limited integrity and availability issues by forcing authenticated users to perform unwanted actions within the SpeedyCache plugin. There is no impact on confidentiality. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying standard CSRF mitigations such as verifying request origins and employing anti-CSRF tokens if possible. Monitor vendor channels for updates and patches.