The iNext Woo Pincode Checker plugin by Imdad Next Web contains a CSRF vulnerability in versions up to 2.3.1. This vulnerability allows attackers to perform unauthorized actions by exploiting the trust of an authenticated user via crafted requests. The CVSS 3.1 vector indicates the attack requires no privileges but does require user interaction, with low impact on integrity and no impact on confidentiality or availability. There is no vendor advisory or patch link provided, and no known exploits have been observed.

The vulnerability could allow attackers to induce users to perform unintended actions within the affected plugin, potentially altering data with low integrity impact. There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible. Monitor official vendor channels for updates and apply patches promptly once released.