This vulnerability in Vladimir Prelovac Plugin Central plugin-central (versions up to 2.5.1) allows an attacker to exploit a Cross-Site Request Forgery (CSRF) weakness to trigger a path traversal condition. The CVSS 3.1 score is 7.4 (high), with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, no confidentiality or integrity impact, and high availability impact. The vulnerability could allow an attacker to cause denial of service or disruption by leveraging CSRF to manipulate file paths. No patch or vendor advisory details are currently provided.

The vulnerability leads to a high impact on availability due to the path traversal triggered via CSRF. There is no impact on confidentiality or integrity. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting access to the affected plugin to mitigate risk. Monitor for vendor updates or security advisories regarding this vulnerability.