This vulnerability involves a CSRF issue in the BeRocket Sequential Order Numbers for WooCommerce plugin, versions up to 3.6.2. An attacker could exploit this by inducing an authenticated user to perform unintended actions within the plugin, potentially altering sequential order numbers or related settings. The vulnerability does not impact confidentiality or availability but has a low impact on integrity. No known exploits are reported in the wild, and no patch or vendor advisory is currently available.

The impact is limited to potential unauthorized modification of plugin settings or behavior via CSRF attacks, which could affect order numbering integrity. There is no direct impact on confidentiality or availability. The medium severity reflects the ease of attack with user interaction but no privileges required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider implementing CSRF protections such as verifying nonces in requests or restricting access to the plugin's administrative functions. Monitoring for updates from BeRocket is recommended.