The Saad Iqbal Quick Contact Form plugin versions up to 8.2.5 contain a Cross-Site Request Forgery (CSRF) vulnerability. This issue allows attackers to induce authenticated users to perform unwanted actions by submitting forged requests. The vulnerability does not impact confidentiality or availability but can cause limited integrity issues. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or vendor advisory is currently available.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions within the Quick Contact Form plugin. The impact is limited to integrity, with no confidentiality or availability effects reported. There are no known exploits in the wild, and the attack requires user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider implementing CSRF protections such as verifying anti-CSRF tokens in requests or restricting form submissions to trusted sources. Monitor vendor channels for updates or official fixes.