The iNext Woo Pincode Checker plugin by Imdad Next Web contains a CSRF vulnerability in versions up to 2.3.1. This vulnerability enables attackers to induce authenticated users to execute unwanted actions via forged requests. The CVSS 3.1 base score is 4.3 (medium), with attack vector network, low attack complexity, no privileges required, user interaction required, and limited impact on integrity only. No patch or official fix information is currently available.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions within the affected plugin, potentially leading to limited integrity impact. There is no confidentiality or availability impact indicated. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible. Monitor vendor communications for updates.