This vulnerability is a CSRF issue in the Memberful - Membership Plugin (memberful-wp) that affects all versions up to 1.81.0. It allows an attacker to induce a logged-in user to execute unauthorized commands by exploiting the lack of proper request validation. The CVSS 3.1 score of 8.0 indicates high impact on confidentiality, integrity, and availability, with network attack vector, low attack complexity, and requiring user interaction and low privileges.

Successful exploitation could lead to unauthorized actions performed on behalf of authenticated users, potentially compromising user data, membership management, and site integrity. The high CVSS score reflects significant impact on confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as verifying nonces or tokens in requests and restricting actions to trusted users. Monitor vendor communications for updates.