This vulnerability in BCM Duplicate Menu (<= 1.1.3) allows CSRF attacks where an attacker can induce an authenticated user to execute unwanted commands on the affected system. The vulnerability does not impact confidentiality or availability but can cause limited integrity issues. The attack vector is network-based, requires no privileges, and user interaction is necessary. No patch or vendor advisory is currently available to confirm remediation status.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions within the BCM Duplicate Menu plugin, potentially leading to limited integrity impact. There is no impact on confidentiality or availability reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting access to trusted users. Monitor vendor channels for updates and apply patches promptly once released.