This vulnerability is a CSRF issue in the wpdesk Flexible PDF Invoices plugin for WooCommerce and WordPress, affecting versions up to 6.0.13. It allows attackers to induce authenticated users to execute unwanted actions without their consent. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity and availability. No patch or official fix information is provided in the available data.

The vulnerability can lead to unauthorized actions performed by authenticated users, potentially disrupting service availability or altering data integrity within the affected plugin. There is no indication of confidentiality compromise. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling the plugin or restricting access to trusted users only. Monitor official wpdesk communications for updates and apply patches promptly once released.