The WP YouTube Live plugin for WordPress, developed by macbookandrew, contains a CSRF vulnerability in versions up to 1.10.0. This vulnerability enables attackers to induce authenticated users to execute unintended actions without their consent. The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, no privileges, and user interaction, with impact limited to integrity loss and no confidentiality or availability impact.

Successful exploitation could allow an attacker to cause an authenticated user to perform actions that modify data or settings within the WP YouTube Live plugin, potentially leading to integrity issues. There is no impact on confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting plugin usage to trusted environments and avoid actions that require authentication from untrusted sources. Monitor official channels for updates regarding patches or mitigations.