The Side Slide Responsive Menu plugin for WordPress suffers from a CSRF vulnerability due to improper or absent nonce validation on a function that updates settings. This flaw enables attackers to forge requests that, when executed by an authenticated administrator, can modify plugin settings or inject malicious web scripts. The vulnerability affects all versions up to and including 1.0. The CVSS 3.1 base score is 6.1, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity but no impact on availability.

An attacker can exploit this vulnerability by tricking a site administrator into clicking a malicious link, leading to unauthorized changes in plugin settings or injection of malicious scripts. This can result in partial compromise of site integrity and confidentiality. There is no indication of availability impact. No known exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should exercise caution with unsolicited links and consider disabling or replacing the vulnerable plugin. Monitoring for updates from the vendor is recommended.