This vulnerability in ElementsReady Addons for Elementor (versions up to 6.6.2) allows CSRF attacks, where an attacker can induce an authenticated user to perform actions without their consent. The vulnerability does not require privileges or result in confidentiality or availability impact but can cause integrity issues. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

The impact is limited to potential unauthorized actions performed by an authenticated user due to CSRF. There is no direct confidentiality or availability impact. The integrity of some operations may be affected at a low level. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, consider implementing standard CSRF protections such as verifying anti-CSRF tokens and validating the origin of requests. Monitor vendor channels for updates and patches.