The anmari amr personalise plugin, versions up to 2.10, contains a CSRF vulnerability that could allow attackers to perform unauthorized actions by exploiting the trust of an authenticated user. The vulnerability is network exploitable without privileges and requires user interaction. It impacts confidentiality, integrity, and availability to a limited extent as indicated by the CVSS vector. No patch or mitigation details are provided in the available data.

Successful exploitation of this CSRF vulnerability could allow attackers to execute unauthorized commands or change settings on behalf of an authenticated user, potentially leading to limited confidentiality, integrity, and availability impacts. However, no known exploits have been reported, and the exact impact depends on the context of the affected application and user privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens and restricting actions to trusted users. Monitor vendor channels for updates and apply patches promptly once released.