This vulnerability concerns the digitalzoomstudio Admin debug wordpress – enable debug plugin, specifically versions up to 1.0.13. The issue is a CSRF vulnerability that allows an attacker to cause an authenticated user to enable debug mode without their consent. The vulnerability does not require privileges (PR:N) but does require user interaction (UI:R). The impact is limited to integrity (I:L) with no confidentiality or availability impact. No known exploits in the wild have been reported, and no patch or mitigation guidance is currently available from the vendor.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to enable debug mode in the plugin, potentially exposing debug information or altering plugin behavior. The impact is limited to integrity with no direct confidentiality or availability consequences. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider disabling or restricting access to the vulnerable plugin to trusted users only. Implementing standard CSRF protections or using security plugins that provide CSRF mitigation may reduce risk.