This vulnerability is a CSRF issue in the CRM Perks WP Zendesk plugin that integrates with multiple WordPress form plugins. It affects versions up to 1.1.3 and allows attackers to trick authenticated users into submitting unwanted requests, potentially leading to limited unauthorized actions. The CVSS vector indicates the attack requires no privileges but does require user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported. No vendor advisory or patch links are provided, and the product is not a cloud service.

The vulnerability could allow an attacker to induce an authenticated user to perform unintended actions within the affected plugin, potentially altering data or settings (integrity impact). There is no impact on confidentiality or availability. The medium severity reflects the limited scope and requirement for user interaction. No known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider minimizing exposure by limiting user roles that can interact with the plugin or disabling the plugin if feasible. Monitor vendor channels for updates and apply patches promptly once released.