The apasionados DoFollow Case by Case plugin versions up to 3.5.1 contain a CSRF vulnerability that could allow an attacker to perform unauthorized actions by exploiting the trust of an authenticated user. The vulnerability does not impact confidentiality or availability but may affect integrity. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact.

The impact is limited to potential unauthorized modification of data or state within the application due to CSRF. There is no direct confidentiality or availability impact. The medium severity reflects the potential for limited integrity impact without elevated privileges or complex attack conditions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens in requests or restricting actions to trusted users. Monitor official vendor channels for updates or patches addressing this vulnerability.