This vulnerability is a CSRF issue in the Product Quantity Dropdown For Woocommerce plugin (silverplugins217) affecting versions up to 1.2. It allows an attacker to induce an authenticated user to perform unintended actions related to product quantity selection via crafted requests. The vulnerability does not require privileges and has a low attack complexity but requires user interaction. The impact is limited to integrity with no confidentiality or availability impact.

The vulnerability can lead to unauthorized modification of product quantity selections by exploiting the trust of an authenticated user. There is no direct impact on confidentiality or availability. The integrity of user actions related to product quantity can be compromised, potentially affecting order accuracy or user experience.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is currently documented, users should monitor the vendor's communications for updates. In the meantime, consider implementing CSRF protections such as nonce verification if possible or restricting access to trusted users only.