The WP Abstracts plugin for WordPress, up to version 2.7.5, contains a CSRF vulnerability in the wp-abstracts-manuscripts-manager component. This vulnerability enables attackers to induce authenticated users to execute unintended actions without their consent. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is necessary. The vulnerability affects confidentiality, integrity, and availability at a low level. No official patch or vendor advisory is currently available.

Successful exploitation of this CSRF vulnerability could allow attackers to perform actions on behalf of authenticated users, potentially leading to limited unauthorized disclosure, modification, or disruption of data managed by the WP Abstracts plugin. The impact is rated as high severity based on the CVSS score of 7.1, but no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as verifying nonces or tokens in requests, restricting plugin access to trusted users, or disabling the plugin if not required.