This vulnerability in SaifuMak Add Custom Codes plugin (versions up to 4.80) enables Cross-Site Request Forgery (CSRF) attacks. An attacker can exploit this by inducing an authenticated user to submit a crafted request, potentially causing unauthorized changes to the plugin's custom code settings. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges, requires user interaction, and impacts integrity but not confidentiality or availability.

Successful exploitation can lead to unauthorized modification of the Add Custom Codes plugin's settings, impacting the integrity of the affected system. There is no direct impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying request origins or disabling the plugin if not needed. Monitor vendor communications for updates on patches or official mitigations.