This vulnerability is a CSRF issue in the aharonyan WP Front User Submit / Front Editor WordPress plugin, affecting versions up to 5.0.6. It allows attackers to trick authenticated users into submitting unauthorized requests, potentially causing low integrity and high availability impacts. The CVSS score of 7.1 reflects the high severity due to ease of exploitation over the network without privileges, though user interaction is required. No patch or official remediation guidance is currently available from the vendor or other sources.

Successful exploitation can lead to unauthorized actions performed by authenticated users, impacting the integrity and availability of the affected system. Confidentiality is not impacted. The attack requires user interaction but no privileges, and can be performed remotely over the network. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting user interactions with untrusted sites and applying standard CSRF mitigations such as using security plugins that enforce CSRF tokens. Monitor vendor channels for updates and apply official patches once released.