The NTC WP Page Loading plugin version 1.0.6 and earlier contains a CSRF vulnerability that could allow an attacker to perform unauthorized actions by exploiting the trust of an authenticated user. The vulnerability requires user interaction and does not require privileges, but it can lead to limited integrity impact. The CVSS 3.1 base score is 4.3, reflecting a medium severity. No known exploits are reported in the wild, and no patch or mitigation details have been provided by the vendor or other authoritative sources.

The vulnerability allows an attacker to induce an authenticated user to perform unintended actions on the WP Page Loading plugin, potentially altering plugin behavior or settings. There is no impact on confidentiality or availability, and the integrity impact is limited. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted links or sites that could trigger CSRF attacks. Monitor vendor communications for updates regarding patches or official mitigations.