This vulnerability involves a CSRF issue in the Nks publish post email notification plugin (versions <= 1.0.2.3). An attacker could exploit this by inducing an authenticated user to execute unintended actions related to email notifications. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact.

The vulnerability could allow an attacker to cause an authenticated user to perform unauthorized actions affecting the integrity of email notification settings or behavior. There is no confidentiality or availability impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Users should monitor for vendor updates and consider implementing CSRF protections or workarounds if possible.