This vulnerability is a CSRF issue in the Skrill Official WooCommerce plugin (versions up to 1.0.66). It allows attackers to induce authenticated users to perform actions without their consent by exploiting the lack of proper request validation. The vulnerability has a CVSS 3.1 base score of 4.3, reflecting a network attack vector with low complexity, no privileges required, and requiring user interaction. The impact is limited to integrity loss without confidentiality or availability impact. No patch or official fix information is provided in the available data.

The vulnerability could allow an attacker to cause an authenticated user to perform unintended actions within the Skrill Official WooCommerce plugin, potentially altering data or settings. There is no confidentiality or availability impact indicated. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens on sensitive requests or restricting actions to trusted users. Monitor vendor channels for updates.