This vulnerability is a CSRF issue in the Auto Tag Links plugin by SEO Roma, affecting versions up to 1.0.13. It allows an attacker to induce an authenticated user to perform actions without their consent by exploiting the lack of proper request validation. The vulnerability does not impact confidentiality or availability but can cause limited integrity issues. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and unchanged scope.

The impact is limited to integrity as the attacker can cause an authenticated user to perform unintended actions via CSRF. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted users where possible.