The Advanced Dynamic Pricing for WooCommerce plugin by algol.plus contains a CSRF vulnerability in versions up to 4.9.3. This vulnerability enables an attacker to perform unauthorized actions by leveraging the trust of an authenticated user through crafted requests. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, no privileges required, and user interaction needed. The impact is limited to integrity with no confidentiality or availability impact. No patch or vendor advisory is currently available, and no known exploits have been reported.

The vulnerability allows an attacker to induce an authenticated user to perform unintended actions on the Advanced Dynamic Pricing for WooCommerce plugin, potentially altering pricing configurations or related settings. The impact is limited to integrity, with no direct confidentiality or availability consequences. The medium severity score reflects the moderate risk posed by this CSRF issue.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, users should consider implementing CSRF protections such as verifying nonces or tokens in requests related to the plugin. Monitoring for updates from algol.plus is recommended to apply any forthcoming official fixes promptly.