The Labinator Content Types Duplicator plugin versions up to 1.1.3 contain a CSRF vulnerability that could allow an attacker to induce an authenticated user to perform unintended actions. The vulnerability does not impact confidentiality or availability but may cause limited integrity impact. The attack requires user interaction and can be executed remotely without privileges. No patch or official remediation details are currently provided.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform actions that may alter data or settings within the Labinator Content Types Duplicator plugin. The impact is limited to integrity with no direct confidentiality or availability effects. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as verifying request origins or using anti-CSRF tokens if possible. Monitor vendor channels for updates.