This vulnerability is a CSRF issue in the Fluent Support plugin by Shahjahan Jewel, affecting versions up to 1.9.1. It allows attackers to induce authenticated users to perform unintended actions without their consent. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability effects.

The vulnerability could allow an attacker to cause an authenticated user to perform unwanted actions within the Fluent Support plugin, potentially altering data or settings. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor Shahjahan Jewel's advisories for updates. Implementing standard CSRF protections or disabling the plugin until a fix is available may reduce risk.