This vulnerability is a CSRF issue in the WP Trio Conditional Shipping for WooCommerce plugin (<= 3.4.0). It allows attackers to induce authenticated users to submit unauthorized requests, potentially causing denial of service or other availability impacts. The vulnerability does not affect confidentiality or integrity. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and high availability impact. No official patch or vendor advisory is currently available.

The vulnerability can be exploited remotely without privileges but requires user interaction. It does not compromise data confidentiality or integrity but can disrupt service availability. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider applying standard CSRF mitigations such as disabling or restricting the plugin if feasible, or limiting user roles that can trigger affected functionality. Monitor vendor channels for updates.