The Simple Page Access Restriction plugin versions up to 1.0.32 contain a CSRF vulnerability that could allow attackers to induce users to perform unintended actions without their consent. The vulnerability requires user interaction and does not grant direct confidentiality or availability impacts but can lead to limited integrity impact. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

The vulnerability can lead to limited integrity impact by allowing unauthorized actions through forged requests. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider disabling or restricting the use of the affected plugin to trusted users only and avoid interacting with untrusted content that could trigger CSRF attacks.