This vulnerability is a Cross-Site Request Forgery (CSRF) issue in the Linked Variation for WooCommerce plugin by Razon Komar Pal, affecting versions up to 1.0.5. CSRF vulnerabilities enable attackers to induce authenticated users to submit unwanted requests to a web application, potentially causing unintended state changes. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or official remediation information is currently available. The plugin is not cloud-hosted, so users must rely on vendor updates for fixes.

The impact is limited to potential unauthorized actions performed by authenticated users due to CSRF. There is no confidentiality or availability impact. The integrity impact is low, as the vulnerability could allow limited unauthorized changes via forged requests. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible, or disabling the plugin if it is not essential. Monitor vendor channels for updates.