The Course Redirects for Learndash WordPress plugin versions up to 0.4 lack nonce validation on form submissions in the settings page, leading to a CSRF vulnerability (CWE-352). This allows an attacker to perform unauthorized changes to plugin settings by tricking an authenticated administrator into submitting a forged request. The vulnerability is network exploitable without privileges but requires user interaction. The CVSS 3.1 base score is 4.3, indicating medium severity with limited impact on integrity and no impact on confidentiality or availability.

An attacker can modify plugin settings without authentication by exploiting the CSRF vulnerability if an administrator is tricked into clicking a crafted link. This could lead to unauthorized configuration changes but does not impact confidentiality or availability. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should avoid clicking untrusted links while logged into the WordPress admin interface and consider implementing additional CSRF protections or restricting access to the plugin settings page.