This vulnerability concerns a CSRF issue in the Till Krüss Email Address Encoder plugin, versions up to 1.0.23. CSRF vulnerabilities enable attackers to trick authenticated users into submitting unwanted requests, potentially causing unintended actions. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to availability with no confidentiality or integrity impact reported.

The vulnerability could allow an attacker to cause a denial of service or disruption of availability by tricking users into performing unintended actions. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits are documented, so the practical impact appears limited at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted users. Monitor the vendor's communications for updates.