This vulnerability is a CSRF issue in the NertWorks All in One Social Share Tools plugin for WordPress, affecting versions up to 1.26. It allows attackers to perform unauthorized actions on behalf of authenticated users by exploiting the lack of proper CSRF protections. The vulnerability does not impact confidentiality but can lead to limited integrity and availability impacts. The CVSS vector indicates it requires no privileges but user interaction is needed, with network attack vector and low attack complexity.

The impact is limited to integrity and availability, as the attacker can cause the victim to perform unintended actions within the plugin context. There is no confidentiality impact reported. The medium severity reflects the potential for limited disruption or unauthorized changes via CSRF.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as nonce verification or disabling the plugin if feasible. Monitor vendor channels for updates.