This vulnerability involves a CSRF issue in the 'Recover abandoned cart for WooCommerce' plugin (sonalsinha21) up to version 2.2. It allows an attacker to trick an authenticated user into submitting unwanted requests to the plugin, potentially causing unintended actions. The vulnerability has a CVSS 3.1 base score of 4.3 (medium severity), with network attack vector, low attack complexity, no privileges required, and requires user interaction. Confidentiality and availability impacts are none, with a low integrity impact. No patch or mitigation details are provided in the available data.

The impact is limited to low integrity modification without affecting confidentiality or availability. An attacker could potentially cause a user to perform unintended actions within the plugin context via CSRF, but no further details on the consequences are provided. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or limiting use of the affected plugin or implement CSRF protections at the application level if possible. Monitor vendor channels for updates.