This vulnerability is a CSRF issue in the Hasina77 Wp Easy Allopass WordPress plugin (versions <= 4.1.1). It allows attackers to induce authenticated users to execute unintended actions by exploiting the lack of proper request validation. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

The vulnerability could allow an attacker to cause an authenticated user to perform actions without their consent, potentially leading to limited integrity impact within the affected WordPress environment. There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider disabling or limiting use of the affected plugin or applying any recommended temporary mitigations from the vendor. Monitor official Hasina77 or WordPress security channels for updates.