The Sticky Social Bar plugin for WordPress, developed by Md Eftakhairul Islam, contains a CSRF vulnerability in versions up to 2.0. This vulnerability enables attackers to perform unauthorized actions on behalf of authenticated users by exploiting the lack of proper request validation. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges, requires user interaction, and impacts confidentiality, integrity, and availability to a limited extent.

Successful exploitation of this CSRF vulnerability could allow attackers to cause limited unauthorized changes or actions within the context of an authenticated user, potentially affecting confidentiality, integrity, and availability of the affected system. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the Sticky Social Bar plugin if possible or apply any recommended temporary mitigations from the vendor. Monitor vendor channels for updates regarding patches or official fixes.