This vulnerability in blubrry PowerPress Podcasting (<= 11.13.12) allows Cross-Site Request Forgery (CSRF) attacks. An attacker could trick an authenticated user into submitting a request that performs unintended actions on the affected application. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, no privileges required, user interaction required, and limited impact on integrity without affecting confidentiality or availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation could allow an attacker to cause an authenticated user to perform unauthorized actions, potentially altering data or settings within the PowerPress Podcasting plugin. There is no impact on confidentiality or availability reported. The overall impact is limited to integrity with medium severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting access to trusted users. Monitor vendor channels for updates and apply patches promptly once available.