This vulnerability is a CSRF issue in the Coupon Affiliates plugin (version <= 6.4.0) by Elliot Sowersby / RelyWP. It allows an attacker to trick authenticated users into submitting unwanted requests, potentially causing denial of service or disruption (as indicated by the CVSS vector showing no confidentiality or integrity impact but high availability impact). The vulnerability is network exploitable with low attack complexity and requires user interaction.

The impact is limited to availability disruption, with no direct confidentiality or integrity compromise. An attacker could cause denial of service or other availability issues by exploiting the CSRF vulnerability. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for vendor updates. In the meantime, applying standard CSRF mitigations such as verifying anti-CSRF tokens and restricting actions to authenticated and authorized users may reduce risk.