The Purab Seo Meta Tags plugin versions up to 1.4 contain a Cross-Site Request Forgery (CSRF) vulnerability. This security flaw enables attackers to induce authenticated users to execute unwanted actions without their consent, potentially compromising the confidentiality, integrity, and availability of the affected system. The vulnerability has a CVSS v3.1 base score of 8.8, reflecting its high severity and ease of exploitation over the network without privileges but requiring user interaction.

Successful exploitation of this CSRF vulnerability could allow attackers to perform unauthorized operations within the Seo Meta Tags plugin context, leading to potential full compromise of the plugin's functionality and associated data. The CVSS vector indicates high impact on confidentiality, integrity, and availability, meaning sensitive data could be exposed or altered, and service disruption is possible.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or limiting use of the Seo Meta Tags plugin or implementing additional CSRF protections at the application or web server level. Monitor vendor channels for updates regarding patches or official mitigations.