This vulnerability is a Cross-Site Request Forgery (CSRF) issue in the ThemeHigh Dynamic Pricing and Discount Rules plugin (versions <= 2.2.9). It allows attackers to induce authenticated users to perform unintended actions related to discount and pricing rules. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and results in low integrity impact without affecting confidentiality or availability. No patch or vendor advisory information is currently available.

The impact is limited to integrity, where an attacker could cause an authenticated user to unknowingly modify discount or pricing rules via CSRF. There is no impact on confidentiality or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as verifying request origins or using anti-CSRF tokens if possible. Monitor official ThemeHigh communications for updates.