This vulnerability is a CSRF issue in the Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant plugin affecting all versions up to 4.1.1. It allows attackers to perform unauthorized actions by exploiting the trust of an authenticated user via crafted requests. The CVSS 3.1 base score is 4.3, reflecting a network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

The impact is limited to potential unauthorized actions performed through CSRF attacks, which may affect the integrity of the affected system's operations related to the plugin. There is no confidentiality or availability impact reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens on sensitive requests or disabling the plugin if feasible to reduce risk.