The jetmonsters Restaurant Menu by MotoPress plugin (version <= 2.4.6) contains a CSRF vulnerability that could allow an attacker to induce an authenticated user to perform unintended actions via crafted requests. The CVSS 3.1 vector indicates the attack requires network access, no privileges, and user interaction, with impacts limited to low integrity and low availability. There is no confidentiality impact. No patch or official remediation guidance is currently available from the vendor or other authoritative sources.

Successful exploitation could result in limited integrity and availability impacts on the affected plugin functionality. Confidentiality is not impacted. Since the vulnerability requires user interaction and no privileges, the risk is moderate. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider mitigating CSRF risks by implementing standard CSRF protections such as verifying nonces or tokens in requests, restricting access to trusted users, or disabling the plugin if feasible.