The WP Supersized plugin for WordPress, developed by Benoit De Boeck, contains a CSRF vulnerability in versions up to 3.1.6. This vulnerability enables attackers to induce authenticated users to execute unwanted actions by leveraging the lack of proper request validation. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact.

An attacker could exploit this vulnerability to cause an authenticated user to perform unintended actions within the WP Supersized plugin context, potentially altering plugin settings or behavior. There is no direct confidentiality or availability impact reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider limiting access to the plugin's administrative functions and applying standard CSRF mitigations such as ensuring proper nonce validation in requests if possible.