This vulnerability in the wpmediadownload Media Library File Download plugin (<= 1.4) allows CSRF attacks, where an attacker can induce an authenticated user to execute unwanted actions by submitting forged requests. The vulnerability does not impact confidentiality or availability but can cause limited integrity issues. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

The impact is limited to potential integrity issues caused by unauthorized actions performed via CSRF. There is no direct confidentiality or availability impact. Exploitation requires user interaction and can be performed remotely without privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying request origins or disabling the vulnerable plugin if feasible.