This vulnerability involves a CSRF issue in the Import into Easy Property Listings plugin by Merv Barrett, affecting versions up to 2.2.1. The vulnerability allows an attacker to induce an authenticated user to perform actions without their consent by exploiting the lack of proper CSRF protections. The CVSS vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity but not confidentiality or availability.

An attacker could leverage this CSRF vulnerability to cause an authenticated user to perform unintended actions within the Import into Easy Property Listings plugin. The impact is limited to integrity, with no direct confidentiality or availability impact reported. The medium severity reflects the potential for limited unauthorized changes but not full compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted contexts. Monitoring vendor channels for updates is recommended.