This vulnerability is a CSRF issue in the Premmerce Product Search for WooCommerce plugin (versions ≤ 2.2.4). It allows attackers to induce authenticated users to perform actions without their consent by exploiting the lack of proper request validation. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

The vulnerability could allow an attacker to cause a user to perform unintended actions within the Premmerce Product Search plugin context, potentially modifying data or settings. There is no reported impact on confidentiality or availability. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protection measures such as verifying nonce tokens or disabling the plugin if not essential. Monitor for updates from Premmerce regarding patches or official mitigations.