This vulnerability in N-Media Bulk Product Sync (sync-wc-google) is a CSRF issue that affects versions up to 8.6. It allows an attacker to trick authenticated users into submitting unwanted requests, potentially causing limited impact such as unauthorized changes or actions within the plugin context. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. Confidentiality and availability are not impacted, and integrity impact is low.

The impact is limited to low integrity loss due to unauthorized actions performed via CSRF. There is no confidentiality or availability impact reported. The vulnerability could allow attackers to manipulate plugin behavior indirectly by exploiting user sessions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying request origins or using security plugins that mitigate CSRF attacks. Monitor vendor channels for updates.