The njshofe Smoothness Slider Shortcode plugin version 1.2.2 and earlier contains a CSRF vulnerability that could allow attackers to induce authenticated users to execute unintended actions by leveraging the user's privileges. The CVSS vector indicates the attack can be performed remotely with low attack complexity, no privileges required, but requires user interaction. The impact includes partial confidentiality, integrity, and availability loss. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this CSRF vulnerability could lead to unauthorized actions performed with the privileges of an authenticated user, potentially resulting in partial loss of confidentiality, integrity, and availability of the affected system or data. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or limiting use of the affected plugin and apply standard CSRF mitigations such as verifying request origins or employing anti-CSRF tokens if possible.