The Build Private Store For Woocommerce plugin by silverplugins217 contains a CSRF vulnerability in versions up to 1.0. This vulnerability enables attackers to perform unauthorized actions by exploiting the trust a web application has in a user's browser. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity with no confidentiality or availability impact.

The vulnerability can lead to unauthorized modification of data or settings within the affected plugin due to forged requests initiated by an attacker. There is no impact on confidentiality or availability reported. The medium severity reflects limited impact confined to integrity with user interaction required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as verifying request tokens or disabling the plugin if not essential. Monitor vendor channels for updates regarding an official fix.